cssproc - npm Package Compare versions

Comparing version 0.0.1 to 0.0.2

lib/index.js

@@ -37,7 +37,14 @@
         relative = resolved;
-        if (item.substr(0, 1) !== path.sep) {
+
+        if (item.charAt(0) !== '/') {
             relative = path.relative(options.root, resolved);
         }
-        expanded = URI.protocol + '//' + URI.hostname + path.join(URI.pathname, relative);
 
+        // Windows root directory handling.
+        if (process.env.OS === 'Windows_NT' && relative.substr(1, 2) === ':\\') {
+            relative = relative.substr(2);
+        }
+
+        expanded = URI.protocol + '//' + URI.hostname + path.join(URI.pathname, relative).replace(/\\\\|\\/g, '/');
+
         str = str.replace(baseItem, baseItem.replace(item, expanded));
@@ -44,0 +51,0 @@ }

package.json

@@ -5,3 +5,3 @@ {
     "author": "Dav Glass <[e-mail]>",
-    "version": "0.0.1",
+    "version": "0.0.2",
     "main": "./lib/index.js",
@@ -8,0 +8,0 @@ "devDependencies": {

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

26422

increased by0.83%

Lines of code

529

increased by0.76%

Worsened metrics

Number of low supply chain risk alerts

2

increased by100%

No dependency changes