commonjs-everywhere - npm Package Compare versions

Comparing version 0.9.1 to 0.9.2

lib/core-modules.js

 // Generated by CoffeeScript 2.0.0-beta6
 void function () {
-  var CJS_DIR, CORE_MODULES, mod, NODE_CORE_MODULES, path;
+  var CJS_DIR, CORE_MODULES, mod, NODE_CORE_MODULES, path, resolve;
   path = require('path');
+  resolve = require('resolve').sync;
   CJS_DIR = path.join(__dirname, '..');
   CORE_MODULES = {
-    buffer: path.join(CJS_DIR, 'node_modules', 'buffer-browserify', 'index.js'),
-    crypto: path.join(CJS_DIR, 'node_modules', 'crypto-browserify', 'index.js'),
-    events: path.join(CJS_DIR, 'node_modules', 'events-browserify', 'events.js'),
-    http: path.join(CJS_DIR, 'node_modules', 'http-browserify', 'index.js'),
-    querystring: path.join(CJS_DIR, 'node_modules', 'querystring', 'index.js'),
-    vm: path.join(CJS_DIR, 'node_modules', 'vm-browserify', 'index.js'),
-    zlib: path.join(CJS_DIR, 'node_modules', 'zlib-browserify', 'index.js')
+    buffer: resolve('buffer-browserify'),
+    constants: resolve('constants-browserify'),
+    crypto: resolve('crypto-browserify'),
+    events: resolve('events-browserify'),
+    http: resolve('http-browserify'),
+    punycode: resolve('./node_modules/punycode', { basedir: CJS_DIR }),
+    querystring: resolve('./node_modules/querystring', { basedir: CJS_DIR }),
+    vm: resolve('vm-browserify'),
+    zlib: resolve('zlib-browserify')
   };
   NODE_CORE_MODULES = [
-    '_stream_duplex.js',
-    '_stream_passthrough.js',
-    '_stream_readable.js',
-    '_stream_transform.js',
-    '_stream_writable.js',
+    '_stream_duplex',
+    '_stream_passthrough',
+    '_stream_readable',
+    '_stream_transform',
+    '_stream_writable',
     'assert',
@@ -26,3 +29,2 @@ 'console',
     'path',
-    'punycode',
     'readline',
@@ -29,0 +31,0 @@ 'stream',

package.json

 {
   "name": "commonjs-everywhere",
-  "version": "0.9.1",
+  "version": "0.9.2",
   "description": "CommonJS browser bundler with aliasing, extensibility, and source maps from the minified JS bundle",
@@ -35,2 +35,3 @@ "homepage": "https://github.com/michaelficarra/commonjs-everywhere",
   "dependencies": {
+    "Base64": "~0.1.2",
     "coffee-script-redux": "2.0.0-beta6",
@@ -41,14 +42,15 @@ "escodegen": "~0.0.24",
     "estraverse": "~0.0.4",
+    "MD5": "~1.0",
+    "mktemp": "~0.3.0",
     "nopt": "~2.1.2",
     "resolve": "~0.3.0",
-    "MD5": "~1.0",
-    "mktemp": "~0.3.0",
-    "Base64": "~0.1.2",
+    "buffer-browserify": "*",
+    "constants-browserify": ">= 0.0.1",
+    "crypto-browserify": "*",
+    "events-browserify": "*",
     "http-browserify": "*",
+    "punycode": "*",
+    "querystring": "*",
     "vm-browserify": "*",
-    "crypto-browserify": "*",
-    "buffer-browserify": "*",
-    "zlib-browserify": "*",
-    "events-browserify": "*",
-    "querystring": "git://github.com/Gozala/querystring.git#master"
+    "zlib-browserify": "*"
   },
@@ -55,0 +57,0 @@ "devDependencies": {

New alerts

Floating dependency

Quality

Package has a dependency with a floating version range. This can cause issues if the dependency publishes a new major version.

Found 2 instances in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 7 instances in 1 package

Fixed alerts

Git dependency

Supply chain risk

Contains a dependency which resolves to a remote git URL. Dependencies fetched from git URLs are not immutable can be used to inject untrusted code or reduce the likelihood of a reproducible install.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

1867430

increased by0.02%

Lines of code

18463

increased by0.01%

Number of critical supply chain risk alerts

0

decreased by-100%

Number of low supply chain risk alerts

54

decreased by-26.03%

Worsened metrics

Dependency count

19

increased by11.76%

Number of medium quality alerts

9

increased by28.57%

Dependency changes

• + Addedconstants-browserify@>= 0.0.1

• + Addedpunycode@*

• + Addedconstants-browserify@1.0.0(transitive)

• + Addedpunycode@2.3.1(transitive)

• + Addedquerystring@0.2.1(transitive)

• Updatedquerystring@*