formidable - npm Package Compare versions

Comparing version 1.0.6 to 1.0.7

package.json

 {
   "name": "formidable",
-  "version": "1.0.6",
+  "version": "1.0.7",
   "dependencies": {},
@@ -5,0 +5,0 @@ "devDependencies": {

Readme.md

@@ -11,3 +11,3 @@ # Formidable
 and encoding images and videos. It has been battle-tested against hundreds of GB of file uploads from
-a big variety of clients and is considered production-ready.
+a large variety of clients and is considered production-ready.
 
@@ -24,2 +24,7 @@ ## Features
 
+### v1.0.6
+
+* Do not default to the default to the field name for file uploads where
+  filename="".
+
 ### v1.0.5
@@ -30,5 +35,9 @@
 
+**Note:** Starting with this version, formidable emits 'file' events for empty
+file input fields. Previously those were incorrectly emitted as regular file
+input fields with value = "".
+
 ### v1.0.4
 
-* Detect a good default tmp directory regardless of plattform. (#88)
+* Detect a good default tmp directory regardless of platform. (#88)
 
@@ -60,4 +69,4 @@ ### v1.0.3
 
-This marks the begin of the development on version 2.0 which will include
-several architecural improvements.
+This marks the beginning of development on version 2.0 which will include
+several architectural improvements.
 
@@ -148,5 +157,5 @@ [See Commits](https://github.com/felixge/node-formidable/compare/v0.9.11...v1.0.0)
 
-### formdiable.IncomingForm
+### formidable.IncomingForm
 
-#### new formdiable.IncomingForm()
+#### new formidable.IncomingForm()
 
@@ -161,4 +170,4 @@ Creates a new incoming form.
 
-The directory for placing file uploads in. You can later on move them using
-`fs.rename()`. The default directoy is picked at module load time depending on
+The directory for placing file uploads in. You can move them later on using
+`fs.rename()`. The default directory is picked at module load time depending on
 the first existing directory from those listed above.
@@ -177,3 +186,3 @@
 Limits the amount of memory a field (not file) can allocate in bytes.
-I this value is exceeded, an `'error'` event is emitted. The default
+If this value is exceeded, an `'error'` event is emitted. The default
 size is 2MB.
@@ -242,3 +251,3 @@
 
-Emitted when the request was aborted by the user. Right now this can be due to a 'timeout' or 'close' event on the socket. In the future there will be a seperate 'timeout' event (needs a change in the node core).
+Emitted when the request was aborted by the user. Right now this can be due to a 'timeout' or 'close' event on the socket. In the future there will be a separate 'timeout' event (needs a change in the node core).
 
@@ -249,7 +258,7 @@ #### Event: 'end' ()
 
-### formdiable.File
+### formidable.File
 
 #### file.size = 0
 
-The size of the uploade file in bytes. If the file is still being uploaded (see `'fileBegin'` event), this property says how many bytes of the file have been written to disk yet.
+The size of the uploaded file in bytes. If the file is still being uploaded (see `'fileBegin'` event), this property says how many bytes of the file have been written to disk yet.
 
@@ -272,3 +281,3 @@ #### file.path = null
 A date object (or `null`) containing the time this file was last written to. Mostly
-here for compatiblity with the [W3C File API Draft](http://dev.w3.org/2006/webapi/FileAPI/).
+here for compatibility with the [W3C File API Draft](http://dev.w3.org/2006/webapi/FileAPI/).
 
@@ -275,0 +284,0 @@ ## License

test/fixture/js/special-chars-in-filename.js

@@ -1,2 +0,2 @@
-var properFilename = '/ \\ ? % * | " < > . ☃ ; \' @ # $ ^ & ( ) - _ = + { } [ ] ` ~.txt';
+var properFilename = 'funkyfilename.txt';
 
@@ -3,0 +3,0 @@ function expect(filename) {

New alerts

New author

Supply chain risk

A new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.

Found 1 instance in 1 package

Fixed alerts

Non-existent author

Supply chain risk

The package was published by an npm account that no longer exists.

Found 1 instance in 1 package

Native code

Supply chain risk

Contains native code (e.g., compiled binaries or shared libraries). Including native code can obscure malicious behavior.

Found 25 instances in 1 package

Improved metrics

Number of lines in readme file

285

increased by3.26%

Number of high supply chain risk alerts

0

decreased by-100%

Number of medium supply chain risk alerts

7

decreased by-77.42%

Worsened metrics

Total package byte prevSize

2033221

decreased by-29.6%

Number of package files

45

decreased by-42.31%

No dependency changes