formidable - npm Package Compare versions

Comparing version 3.1.3 to 3.1.4

package.json

 {
   "name": "formidable",
-  "version": "3.1.3",
+  "version": "3.1.4",
   "license": "MIT",
@@ -87,3 +87,3 @@ "description": "A node.js module for parsing form data, especially file uploads.",
   },
-  "packageManager": "yarn@1.22.11",
+  "packageManager": "yarn@1.22.17",
   "keywords": [
@@ -90,0 +90,0 @@ "multipart",

README.md

@@ -78,16 +78,12 @@ <p align="center">
 
-```sh
+```
 # v2
 npm install formidable
+npm install formidable@v2
 
-## 3.x
-npm install formidable@3.x
-```
-
-
-# or v3
+# v3
 npm install formidable@v3
 ```
 
-_**Note:** In near future v3 will be published on the `latest` NPM dist-tag. Future not ready releases will continue to be published on `canary` dist-tag._
+_**Note:** In the near future v3 will be published on the `latest` NPM dist-tag. Future not ready releases will be published on `*-next` dist-tags for the corresponding version._
 
@@ -105,3 +101,3 @@
 ```js
-import http from 'http';
+import http from 'node:http';
 import formidable from 'formidable';
@@ -108,0 +104,0 @@

src/Formidable.js

 /* eslint-disable class-methods-use-this */
 /* eslint-disable no-underscore-dangle */
 
-import os from 'os';
-import path from 'path';
+import os from 'node:os';
+import path from 'node:path';
+import { EventEmitter } from 'node:events';
+import { StringDecoder } from 'node:string_decoder';
 import hexoid from 'hexoid';
 import once from 'once';
 import dezalgo from 'dezalgo';
-import { EventEmitter } from 'events';
-import { StringDecoder } from 'string_decoder';
 import { octetstream, querystring, multipart, json } from './plugins/index.js';
@@ -33,5 +33,6 @@ import PersistentFile from './PersistentFile.js';
   defaultInvalidName: 'invalid-name',
-  filter() {
+  filter(_part) {
     return true;
   },
+  filename: undefined,
 };
@@ -92,2 +93,4 @@
     this._setUpMaxFields();
+    this.ended = undefined;
+    this.type = undefined;
   }
@@ -94,0 +97,0 @@

src/FormidableError.js

@@ -16,2 +16,3 @@ const missingPlugin = 1000;
 const unknownTransferEncoding = 1014;
+const pluginFailed = 1017;
 
@@ -42,4 +43,5 @@ const FormidableError = class extends Error {
   unknownTransferEncoding,
+  pluginFailed,
 };
 
 export default FormidableError;

src/helpers/firstValues.js

@@ -0,0 +0,0 @@ import { multipartType } from '../plugins/multipart.js';

src/helpers/readBooleans.js

@@ -0,0 +0,0 @@ const readBooleans = (fields, listOfBooleans) => {

src/index.js

@@ -0,0 +0,0 @@ import PersistentFile from './PersistentFile.js';

src/parsers/Dummy.js

 /* eslint-disable no-underscore-dangle */
 
-import { Transform } from 'stream';
+import { Transform } from 'node:stream';
 
@@ -5,0 +5,0 @@ class DummyParser extends Transform {

src/parsers/index.js

@@ -0,0 +0,0 @@ import JSONParser from './JSON.js';

src/parsers/JSON.js

 /* eslint-disable no-underscore-dangle */
 
-import { Transform } from 'stream';
+import { Transform } from 'node:stream';
 
@@ -5,0 +5,0 @@ class JSONParser extends Transform {

src/parsers/Multipart.js

@@ -6,3 +6,3 @@ /* eslint-disable no-fallthrough */
 
-import { Transform } from 'stream';
+import { Transform } from 'node:stream';
 import * as errors from '../FormidableError.js';
@@ -9,0 +9,0 @@ import FormidableError from '../FormidableError.js';

src/parsers/OctetStream.js

@@ -1,2 +0,2 @@
-import { PassThrough } from 'stream';
+import { PassThrough } from 'node:stream';
 
@@ -3,0 +3,0 @@ class OctetStreamParser extends PassThrough {

src/parsers/Querystring.js

 /* eslint-disable no-underscore-dangle */
 
-import { Transform } from 'stream';
+import { Transform } from 'node:stream';
 
-// This is a buffering parser, not quite as nice as the multipart one.
-// If I find time I'll rewrite this to be fully streaming as well
+// This is a buffering parser, have a look at StreamingQuerystring.js for a streaming parser
 class QuerystringParser extends Transform {
@@ -8,0 +7,0 @@ constructor(options = {}) {

src/parsers/StreamingQuerystring.js

 // not used
 /* eslint-disable no-underscore-dangle */
 
-import { Transform } from 'stream';
+import { Transform } from 'node:stream';
 import FormidableError, { maxFieldsSizeExceeded } from '../FormidableError.js';
@@ -6,0 +6,0 @@

src/PersistentFile.js

 /* eslint-disable no-underscore-dangle */
 
-import { WriteStream, unlink } from 'fs';
-import { createHash } from 'crypto';
-import { EventEmitter } from 'events';
+import { WriteStream, unlink } from 'node:fs';
+import { createHash } from 'node:crypto';
+import { EventEmitter } from 'node:events';
 
@@ -7,0 +7,0 @@ class PersistentFile extends EventEmitter {

src/plugins/index.js

@@ -0,0 +0,0 @@ import octetstream from './octetstream.js';

src/plugins/json.js

@@ -0,0 +0,0 @@ /* eslint-disable no-underscore-dangle */

src/plugins/multipart.js

 /* eslint-disable no-underscore-dangle */
 
-import { Stream } from 'stream';
+import { Stream } from 'node:stream';
 import MultipartParser from '../parsers/Multipart.js';
@@ -5,0 +5,0 @@ import * as errors from '../FormidableError.js';

src/plugins/octetstream.js

@@ -0,0 +0,0 @@ /* eslint-disable no-underscore-dangle */

src/plugins/querystring.js

@@ -0,0 +0,0 @@ /* eslint-disable no-underscore-dangle */

src/VolatileFile.js

 /* eslint-disable no-underscore-dangle */
 
-import { createHash } from 'crypto';
-import { EventEmitter } from 'events';
+import { createHash } from 'node:crypto';
+import { EventEmitter } from 'node:events';
 
@@ -6,0 +6,0 @@ class VolatileFile extends EventEmitter {

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

90314

increased by3.34%

Lines of code

1531

increased by0.26%

Number of low supply chain risk alerts

1

decreased by-50%

Worsened metrics

Number of lines in readme file

851

decreased by-0.47%

No dependency changes