form-data - npm Package Compare versions

Comparing version 2.5.1 to 2.5.2

lib/form_data.js

@@ -11,2 +11,3 @@ var CombinedStream = require('combined-stream');
 var populate = require('./populate.js');
+var Buffer = require('safe-buffer').Buffer; // eslint-disable-line no-shadow
 
@@ -64,3 +65,3 @@ // Public API
   // https://github.com/felixge/node-form-data/issues/38
-  if (util.isArray(value)) {
+  if (Array.isArray(value)) {
     // Please convert your array into string
@@ -319,3 +320,3 @@ // the way web server expects it
 FormData.prototype.getBuffer = function() {
-  var dataBuffer = new Buffer.alloc( 0 );
+  var dataBuffer = new Buffer.alloc(0);
   var boundary = this.getBoundary();
@@ -322,0 +323,0 @@

package.json

@@ -5,3 +5,3 @@ {
   "description": "A library to create readable \"multipart/form-data\" streams. Can be used to submit forms and file uploads to other web applications.",
-  "version": "2.5.1",
+  "version": "2.5.2",
   "repository": {
@@ -15,9 +15,12 @@ "type": "git",
   "scripts": {
-    "pretest": "rimraf coverage test/tmp",
-    "test": "istanbul cover test/run.js",
-    "posttest": "istanbul report lcov text",
-    "lint": "eslint lib/*.js test/*.js test/integration/*.js",
+    "pretest": "npm run lint",
+    "pretests-only": "rimraf coverage test/tmp",
+    "tests-only": "istanbul cover test/run.js",
+    "posttests-only": "istanbul report lcov text",
+    "test": "npm run tests-only",
+    "posttest": "npx npm@'>=10.2' audit --production",
+    "lint": "eslint --ext=js,mjs .",
     "report": "istanbul report lcov text",
     "ci-lint": "is-node-modern 8 && npm run lint || is-node-not-modern 8",
-    "ci-test": "npm run test && npm run browser && npm run report",
+    "ci-test": "npm run tests-only && npm run browser && npm run report",
     "predebug": "rimraf coverage test/tmp",
@@ -45,3 +48,4 @@ "debug": "verbose=1 ./test/run.js",
     "combined-stream": "^1.0.6",
-    "mime-types": "^2.1.12"
+    "mime-types": "^2.1.12",
+    "safe-buffer": "^5.2.1"
   },
@@ -53,3 +57,3 @@ "devDependencies": {
     "coveralls": "^3.0.4",
-    "cross-spawn": "^6.0.5",
+    "cross-spawn": "^4.0.2",
     "eslint": "^6.0.1",
@@ -56,0 +60,0 @@ "fake": "^0.2.2",

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Unstable ownership

Supply chain risk

A new collaborator has begun publishing package versions. Package stability and security risk may be elevated.

Found 1 instance in 1 package

New author

Supply chain risk

A new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Improved metrics

Lines of code

441

increased by0.23%

Worsened metrics

Total package byte prevSize

30046

decreased by-27.32%

Dependency count

4

increased by33.33%

Number of package files

7

decreased by-12.5%

Number of high supply chain risk alerts

1

increased byInfinity%

Number of medium supply chain risk alerts

3

increased by50%

Dependency changes

• + Addedsafe-buffer@^5.2.1

• + Addedsafe-buffer@5.2.1(transitive)