express-middleware - npm Package Compare versions

Comparing version 1.8.0 to 1.9.1

package.json

 {
   "name": "express-middleware",
-  "version": "1.8.0",
+  "version": "1.9.1",
   "description": "Set of middlewares for Chauffeur-Privé",
@@ -12,26 +12,25 @@ "keywords": [
   "dependencies": {
-    "@chauffeur-prive/i18n": "1.2.0",
-    "accept-language-parser": "1.3.0",
-    "bunyan": "1.8.1",
-    "co-express": "1.2.2",
-    "country-language": "0.1.7",
-    "eslint-config-cp": "github:transcovo/eslint-config-cp#1.1.0",
+    "@chauffeur-prive/i18n": "1.8.0",
+    "accept-language-parser": "^1.3.0",
+    "bunyan": "~1.8.1",
+    "co-express": "^1.2.2",
+    "country-language": "^0.1.7",
     "http-errors": "1.5.1",
     "ipaddr.js": "1.2.0",
-    "lodash": "4.11.1",
-    "morgan": "1.7.0",
-    "uuid": "3.0.1"
+    "lodash": "~4.11.1",
+    "morgan": "~1.7.0",
+    "node-uuid": "~1.4.7"
   },
   "devDependencies": {
-    "chai": "3.5.0",
-    "co-mocha": "1.1.2",
-    "coveralls": "2.11.6",
-    "eslint": "1.10.3",
+    "chai": "~3.5.0",
+    "co-mocha": "~1.1.2",
+    "coveralls": "~2.11.6",
+    "eslint": "~1.10.3",
     "eslint-config-cp": "transcovo/eslint-config-cp#1.1.0",
-    "express": "4.14.0",
-    "istanbul": "0.4.2",
-    "mocha": "2.4.5",
-    "mocha-lcov-reporter": "1.0.0",
-    "sinon": "1.17.3",
-    "supertest": "2.0.1"
+    "express": "^4.14.0",
+    "istanbul": "~0.4.2",
+    "mocha": "~2.4.5",
+    "mocha-lcov-reporter": "~1.0.0",
+    "sinon": "~1.17.3",
+    "supertest": "^2.0.1"
   },
@@ -51,3 +50,3 @@ "scripts": {
   "engines": {
-    "node": ">=6.0.0",
+    "node": "6.11.1",
     "npm": ">=2.14.7"
@@ -61,2 +60,2 @@ },
   "license": "Apache-2.0"
-}
+}

src/middleware/requestId.js

 'use strict';
 
-const uuid = require('uuid');
+const uuid = require('node-uuid');
 
@@ -5,0 +5,0 @@ module.exports = setup;

Fixed alerts

GitHub dependency

Supply chain risk

Contains a dependency which resolves to a GitHub URL. Dependencies fetched from GitHub specifiers are not immutable can be used to inject untrusted code or reduce the likelihood of a reproducible install.

Found 1 instance in 1 package

Improved metrics

Dependency count

10

decreased by-9.09%

Number of high supply chain risk alerts

1

decreased by-50%

Worsened metrics

Total package byte prevSize

85863

decreased by-0.09%

Dependency changes

• + Addednode-uuid@~1.4.7

• + Addedaccept-language-parser@1.5.0(transitive)

• + Addedbunyan@1.8.15(transitive)

• + Addeddtrace-provider@0.8.8(transitive)

• + Addedlodash@4.11.2(transitive)

• + Addednode-uuid@1.4.8(transitive)

• - Removedeslint-config-cp@github:transcovo/eslint-config-cp#1.1.0

• - Removeduuid@3.0.1

• - Removedaccept-language-parser@1.3.0(transitive)

• - Removedbunyan@1.8.1(transitive)

• - Removeddtrace-provider@0.6.0(transitive)

• - Removedlodash@4.11.1(transitive)

• - Removeduuid@3.0.1(transitive)

• Updated@chauffeur-prive/i18n@1.8.0

• Updatedaccept-language-parser@^1.3.0

• Updatedbunyan@~1.8.1

• Updatedco-express@^1.2.2

• Updatedcountry-language@^0.1.7

• Updatedlodash@~4.11.1

• Updatedmorgan@~1.7.0