exiftool-vendored - npm Package Compare versions

Comparing version 14.0.0 to 14.1.0

CHANGELOG.md

@@ -27,2 +27,10 @@ # Changelog/Versioning
 
+### v14.1.0
+
+- 🌱 ExifTool upgraded to [v12.21](https://exiftool.org/history.html#v12.21)
+
+- 📦 Stopped excluding sourcemaps
+
+- 📦 Updated dependencies
+
 ### v14.0.0
@@ -29,0 +37,0 @@

package.json

 {
   "name": "exiftool-vendored",
-  "version": "14.0.0",
+  "version": "14.1.0",
   "description": "Efficient, cross-platform access to ExifTool",
@@ -75,8 +75,8 @@ "main": "./dist/ExifTool.js",
     "@types/chai-subset": "^1.3.3",
-    "@types/fs-extra": "^9.0.7",
+    "@types/fs-extra": "^9.0.8",
     "@types/globule": "^1.1.3",
     "@types/he": "^1.1.1",
-    "@types/luxon": "^1.26.0",
+    "@types/luxon": "^1.26.2",
     "@types/mocha": "^8.2.1",
-    "@types/node": "^14.14.31",
+    "@types/node": "^14.14.35",
     "@types/progress": "^2.0.3",
@@ -87,8 +87,8 @@ "@types/rimraf": "^3.0.0",
     "@types/xmldom": "^0.1.30",
-    "@typescript-eslint/eslint-plugin": "^4.15.2",
-    "@typescript-eslint/parser": "^4.15.2",
-    "chai": "^4.3.0",
+    "@typescript-eslint/eslint-plugin": "^4.18.0",
+    "@typescript-eslint/parser": "^4.18.0",
+    "chai": "^4.3.4",
     "chai-as-promised": "^7.1.1",
     "chai-subset": "^1.6.0",
-    "eslint": "^7.20.0",
+    "eslint": "^7.22.0",
     "eslint-plugin-import": "^2.22.1",
@@ -99,3 +99,3 @@ "eslint-plugin-node": "^11.1.0",
     "globule": "^1.3.2",
-    "mocha": "^8.3.0",
+    "mocha": "^8.3.2",
     "npm-run-all": "^4.1.5",
@@ -109,9 +109,9 @@ "prettier": "^2.2.1",
     "tmp": "^0.2.1",
-    "typedoc": "^0.20.27",
-    "typescript": "^4.1.5",
-    "xmldom": "^0.4.0",
+    "typedoc": "^0.20.32",
+    "typescript": "^4.2.3",
+    "xmldom": "^0.5.0",
     "xpath": "^0.0.32"
   },
   "dependencies": {
-    "batch-cluster": "^6.0.1",
+    "batch-cluster": "^6.0.2",
     "he": "^1.2.0",
@@ -122,5 +122,5 @@ "luxon": "^1.26.0",
   "optionalDependencies": {
-    "exiftool-vendored.exe": "^12.19.0",
-    "exiftool-vendored.pl": "^12.19.0"
+    "exiftool-vendored.exe": "^12.21.0",
+    "exiftool-vendored.pl": "^12.21.0"
   }
 }

New alerts

Empty package

Supply chain risk

Package does not contain any code. It may be removed, is name squatting, or the result of a faulty package publish.

Found 1 instance in 1 package

Major refactor

Supply chain risk

Package has recently undergone a major refactor. It may be unstable or indicate significant internal changes. Use caution when updating to versions that include significant changes.

Found 1 instance in 1 package

Fixed alerts

Shell access

Supply chain risk

This module accesses the system shell. Accessing the system shell increases the risk of executing arbitrary code.

Found 1 instance in 1 package

Dynamic require

Supply chain risk

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

Found 1 instance in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

Improved metrics

Number of low supply chain risk alerts

0

decreased by-100%

Worsened metrics

Total package byte prevSize

59340

decreased by-83.9%

Number of package files

4

decreased by-92.45%

Lines of code

0

decreased by-100%

Number of medium supply chain risk alerts

2

increased by100%

Dependency changes

• Updatedbatch-cluster@^6.0.2