formidable - npm Package Compare versions

Comparing version 1.0.3 to 1.0.4

lib/incoming_form.js

 if (global.GENTLY) require = GENTLY.hijack(require);
 
+var fs = require('fs');
 var util = require('./util'),
@@ -20,3 +21,3 @@ path = require('path'),
   this.keepExtensions = false;
-  this.uploadDir = '/tmp';
+  this.uploadDir = IncomingForm.UPLOAD_DIR;
   this.encoding = 'utf-8';
@@ -36,2 +37,16 @@ this.headers = null;
 
+IncomingForm.UPLOAD_DIR = (function() {
+  var dirs = [process.env.TMP, '/tmp', process.cwd()];
+  for (var i = 0; i < dirs.length; i++) {
+    var dir = dirs[i];
+    var isDirectory = false;
+
+    try {
+      isDirectory = fs.statSync(dir).isDirectory();
+    } catch (e) {}
+
+    if (isDirectory) return dir;
+  }
+})();
+
 IncomingForm.prototype.parse = function(req, cb) {
@@ -38,0 +53,0 @@ this.pause = function() {

package.json

 {
   "name": "formidable",
-  "version": "1.0.3",
+  "version": "1.0.4",
   "dependencies": {},
@@ -5,0 +5,0 @@ "devDependencies": {

Readme.md

@@ -145,5 +145,7 @@ # Formidable
 
-#### incomingForm.uploadDir = '/tmp'
+#### incomingForm.uploadDir = process.env.TMP || '/tmp' || process.cwd()
 
-The directory for placing file uploads in. You can later on move them using `fs.rename()`.
+The directory for placing file uploads in. You can later on move them using
+`fs.rename()`. The default directoy is picked at module load time depending on
+the first existing directory from those listed above.
 
@@ -150,0 +152,0 @@ #### incomingForm.keepExtensions = false

New alerts

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 1 instance in 1 package

Fixed alerts

Major refactor

Supply chain risk

Package has recently undergone a major refactor. It may be unstable or indicate significant internal changes. Use caution when updating to versions that include significant changes.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

2801928

increased by1.17%

Lines of code

1938

increased by0.62%

Number of lines in readme file

267

increased by0.75%

Number of medium supply chain risk alerts

24

decreased by-4%

Worsened metrics

Number of low supply chain risk alerts

21

increased by10.53%

No dependency changes