connect - npm Package Compare versions

Comparing version 2.28.2 to 2.28.3

History.md

@@ -0,1 +1,19 @@
+2.28.3 / 2015-01-31
+===================
+
+  * deps: compression@~1.3.1
+    - deps: accepts@~1.2.3
+    - deps: compressible@~2.0.2
+  * deps: csurf@~1.6.6
+    - deps: csrf@~2.0.5
+  * deps: errorhandler@~1.3.3
+    - deps: accepts@~1.2.3
+  * deps: express-session@~1.10.2
+    - deps: uid-safe@1.0.3
+  * deps: serve-index@~1.6.1
+    - deps: accepts@~1.2.3
+    - deps: mime-types@~2.0.8
+  * deps: type-is@~1.5.6
+    - deps: mime-types@~2.0.8
+
 2.28.2 / 2015-01-20
@@ -2,0 +20,0 @@ ===================

package.json

 {
   "name": "connect",
   "description": "High performance middleware framework",
-  "version": "2.28.2",
+  "version": "2.28.3",
   "author": "TJ Holowaychuk <[e-mail]> (http://tjholowaychuk.com)",
@@ -26,9 +26,9 @@ "contributors": [
     "cookie-signature": "1.0.5",
-    "compression": "~1.3.0",
+    "compression": "~1.3.1",
     "connect-timeout": "~1.5.0",
-    "csurf": "~1.6.5",
+    "csurf": "~1.6.6",
     "debug": "~2.1.1",
     "depd": "~1.0.0",
-    "errorhandler": "~1.3.2",
-    "express-session": "~1.10.1",
+    "errorhandler": "~1.3.3",
+    "express-session": "~1.10.2",
     "finalhandler": "0.3.3",
@@ -46,5 +46,5 @@ "fresh": "0.2.4",
     "serve-favicon": "~2.2.0",
-    "serve-index": "~1.6.0",
+    "serve-index": "~1.6.1",
     "serve-static": "~1.8.1",
-    "type-is": "~1.5.5",
+    "type-is": "~1.5.6",
     "utils-merge": "1.0.0",
@@ -58,3 +58,3 @@ "vhost": "~3.0.0",
     "mocha": "~2.1.0",
-    "should": "~4.6.1"
+    "should": "~4.6.2"
   },
@@ -61,0 +61,0 @@ "license": "MIT",

New alerts

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 1 instance in 1 package

Fixed alerts

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

179589

increased by0.24%

Number of low supply chain risk alerts

6

decreased by-14.29%

Dependency changes

• Updatedcompression@~1.3.1

• Updatedcsurf@~1.6.6

• Updatederrorhandler@~1.3.3

• Updatedexpress-session@~1.10.2

• Updatedserve-index@~1.6.1

• Updatedtype-is@~1.5.6