express - npm Package Compare versions

Comparing version 4.18.2 to 4.18.3

lib/router/index.js

@@ -39,3 +39,3 @@ /*!
  * @param {Object} [options]
- * @return {Router} which is an callable function
+ * @return {Router} which is a callable function
  * @public
@@ -42,0 +42,0 @@ */

lib/router/route.js

@@ -63,3 +63,6 @@ /*!
 
-  var name = method.toLowerCase();
+  // normalize name
+  var name = typeof method === 'string'
+    ? method.toLowerCase()
+    : method
 
@@ -107,4 +110,6 @@ if (name === 'head' && !this.methods['head']) {
   }
+  var method = typeof req.method === 'string'
+    ? req.method.toLowerCase()
+    : req.method
 
-  var method = req.method.toLowerCase();
   if (method === 'head' && !this.methods['head']) {
@@ -111,0 +116,0 @@ method = 'get';

lib/utils.js

@@ -120,6 +120,4 @@ /*!
  * object with `.value`, `.quality` and `.params`.
- * also includes `.originalIndex` for stable sorting
  *
  * @param {String} str
- * @param {Number} index
  * @return {Object}
@@ -129,5 +127,5 @@ * @api private
 
-function acceptParams(str, index) {
+function acceptParams (str) {
   var parts = str.split(/ *; */);
-  var ret = { value: parts[0], quality: 1, params: {}, originalIndex: index };
+  var ret = { value: parts[0], quality: 1, params: {} }
 
@@ -287,2 +285,3 @@ for (var i = 1; i < parts.length; ++i) {
  *
+ * @param {String} str
  * @return {Object}
@@ -289,0 +288,0 @@ * @private

package.json

 {
   "name": "express",
   "description": "Fast, unopinionated, minimalist web framework",
-  "version": "4.18.2",
+  "version": "4.18.3",
   "author": "TJ Holowaychuk <[e-mail]>",
@@ -33,3 +33,3 @@ "contributors": [
     "array-flatten": "1.1.1",
-    "body-parser": "1.20.1",
+    "body-parser": "1.20.2",
     "content-disposition": "0.5.4",
@@ -69,4 +69,4 @@ "content-type": "~1.0.4",
     "cookie-session": "2.0.0",
-    "ejs": "3.1.8",
-    "eslint": "8.24.0",
+    "ejs": "3.1.9",
+    "eslint": "8.47.0",
     "express-session": "1.17.2",
@@ -76,5 +76,4 @@ "hbs": "4.2.0",
     "method-override": "3.0.0",
-    "mocha": "10.0.0",
+    "mocha": "10.2.0",
     "morgan": "1.10.0",
-    "multiparty": "4.2.3",
     "nyc": "15.1.0",
@@ -81,0 +80,0 @@ "pbkdf2-password": "1.2.1",

Readme.md

@@ -107,3 +107,3 @@ [![Express Logo](https://i.cloudup.com/zfY6lL7eFa-3000x3000.png)](http://expressjs.com/)
 ```console
-$ git clone git://github.com/expressjs/express.git --depth 1
+$ git clone https://github.com/expressjs/express.git --depth 1
 $ cd express
@@ -110,0 +110,0 @@ $ npm install

New alerts

New author

Supply chain risk

A new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

214068

increased by0.1%

Dev dependency count

16

decreased by-5.88%

Lines of code

3468

increased by0.12%

Worsened metrics

Number of medium supply chain risk alerts

6

increased by20%

Dependency changes

• + Addedbody-parser@1.20.2(transitive)

• + Addedraw-body@2.5.2(transitive)

• - Removedbody-parser@1.20.1(transitive)

• - Removedraw-body@2.5.1(transitive)

• Updatedbody-parser@1.20.2