express - npm Package Compare versions

Comparing version 4.12.3 to 4.12.4

package.json

 {
   "name": "express",
   "description": "Fast, unopinionated, minimalist web framework",
-  "version": "4.12.3",
+  "version": "4.12.4",
   "author": "TJ Holowaychuk <[e-mail]>",
@@ -30,3 +30,3 @@ "contributors": [
   "dependencies": {
-    "accepts": "~1.2.5",
+    "accepts": "~1.2.7",
     "content-disposition": "0.5.0",
@@ -36,19 +36,19 @@ "content-type": "~1.0.1",
     "cookie-signature": "1.0.6",
-    "debug": "~2.1.3",
-    "depd": "~1.0.0",
+    "debug": "~2.2.0",
+    "depd": "~1.0.1",
     "escape-html": "1.0.1",
-    "etag": "~1.5.1",
-    "finalhandler": "0.3.4",
+    "etag": "~1.6.0",
+    "finalhandler": "0.3.6",
     "fresh": "0.2.4",
     "merge-descriptors": "1.0.0",
     "methods": "~1.1.1",
-    "on-finished": "~2.2.0",
+    "on-finished": "~2.2.1",
     "parseurl": "~1.3.0",
     "path-to-regexp": "0.1.3",
-    "proxy-addr": "~1.0.7",
-    "qs": "2.4.1",
+    "proxy-addr": "~1.0.8",
+    "qs": "2.4.2",
     "range-parser": "~1.0.2",
-    "send": "0.12.2",
-    "serve-static": "~1.9.2",
-    "type-is": "~1.6.1",
+    "send": "0.12.3",
+    "serve-static": "~1.9.3",
+    "type-is": "~1.6.2",
     "vary": "~1.0.0",
@@ -60,16 +60,16 @@ "utils-merge": "1.0.0"
     "ejs": "2.3.1",
-    "istanbul": "0.3.8",
+    "istanbul": "0.3.9",
     "marked": "0.3.3",
-    "mocha": "~2.2.1",
-    "should": "~5.2.0",
-    "supertest": "~0.15.0",
-    "body-parser": "~1.12.2",
-    "connect-redis": "~2.2.0",
+    "mocha": "2.2.5",
+    "should": "6.0.1",
+    "supertest": "1.0.1",
+    "body-parser": "~1.12.4",
+    "connect-redis": "~2.3.0",
     "cookie-parser": "~1.3.4",
     "cookie-session": "~1.1.0",
-    "express-session": "~1.10.4",
+    "express-session": "~1.11.2",
     "jade": "~1.9.2",
-    "method-override": "~2.3.2",
-    "morgan": "~1.5.2",
-    "multiparty": "~4.1.1",
+    "method-override": "~2.3.3",
+    "morgan": "~1.5.3",
+    "multiparty": "~4.1.2",
     "vhost": "~3.0.0"
@@ -76,0 +76,0 @@ },

Readme.md

@@ -90,3 +90,3 @@ [![Express Logo](https://i.cloudup.com/zfY6lL7eFa-3000x3000.png)](http://expressjs.com/)
 
-  To view the examples, clone the Express repo and install the dependancies:
+  To view the examples, clone the Express repo and install the dependencies:
 
@@ -93,0 +93,0 @@ ```bash

New alerts

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 1 instance in 1 package

Fixed alerts

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

176950

increased by0.93%

Number of low supply chain risk alerts

3

decreased by-25%

Dependency changes

• + Addedfinalhandler@0.3.6(transitive)

• + Addedqs@2.4.2(transitive)

• - Removeddebug@2.1.3(transitive)

• - Removedetag@1.5.1(transitive)

• - Removedfinalhandler@0.3.4(transitive)

• - Removedms@0.7.0(transitive)

• - Removedqs@2.4.1(transitive)

• - Removedsend@0.12.2(transitive)

• Updatedaccepts@~1.2.7

• Updateddebug@~2.2.0

• Updateddepd@~1.0.1

• Updatedetag@~1.6.0

• Updatedfinalhandler@0.3.6

• Updatedon-finished@~2.2.1

• Updatedproxy-addr@~1.0.8

• Updatedqs@2.4.2

• Updatedsend@0.12.3

• Updatedserve-static@~1.9.3

• Updatedtype-is@~1.6.2