formstream - npm Package Compare versions

Comparing version 1.5.1 to 1.5.2

lib/formstream.js

@@ -38,2 +38,3 @@ /**
 var Stream = require('stream');
+var crypto = require('crypto');
 var parseStream = require('pause-stream');
@@ -75,11 +76,4 @@ var util = require('util');
 FormStream.prototype._generateBoundary = function() {
-  // https://github.com/felixge/node-form-data/blob/master/lib/form_data.js#L162
-  // This generates a 50 character boundary similar to those used by Firefox.
-  // They are optimized for boyer-moore parsing.
-  var boundary = '--------------------------';
-  for (var i = 0; i < 24; i++) {
-    boundary += Math.floor(Math.random() * 10).toString(16);
-  }
-
-  return boundary;
+  // https://github.com/form-data/form-data/blob/16e00765342106876f98a1c9703314006c9e937a/lib/form_data.js#L345
+  return '--------------------------' + crypto.randomBytes(12).toString('hex');
 };
@@ -86,0 +80,0 @@

package.json

 {
   "name": "formstream",
-  "version": "1.5.1",
+  "version": "1.5.2",
   "description": "A multipart/form-data encoded stream, helper for file upload.",
@@ -16,4 +16,3 @@ "main": "lib/formstream.js",
     "lint": "jshint .",
-    "tsd": "tsd",
-    "contributor": "git-contributor"
+    "tsd": "tsd"
   },
@@ -44,3 +43,2 @@ "repository": {
     "express": "^4.16.4",
-    "git-contributor": "^2.1.5",
     "jshint": "^2.13.6",
@@ -47,0 +45,0 @@ "pedding": "1",

README.md

@@ -207,12 +207,6 @@ # formstream
 
-<!-- GITCONTRIBUTOR_START -->
-
 ## Contributors
 
-|[<img src="https://avatars.githubusercontent.com/u/156269?v=4" width="100px;"/><br/><sub><b>fengmk2</b></sub>](https://github.com/fengmk2)<br/>|[<img src="https://avatars.githubusercontent.com/u/288288?v=4" width="100px;"/><br/><sub><b>xingrz</b></sub>](https://github.com/xingrz)<br/>|[<img src="https://avatars.githubusercontent.com/u/32174276?v=4" width="100px;"/><br/><sub><b>semantic-release-bot</b></sub>](https://github.com/semantic-release-bot)<br/>|[<img src="https://avatars.githubusercontent.com/u/13151189?v=4" width="100px;"/><br/><sub><b>fjc0k</b></sub>](https://github.com/fjc0k)<br/>|[<img src="https://avatars.githubusercontent.com/u/18096247?v=4" width="100px;"/><br/><sub><b>mrspeiser</b></sub>](https://github.com/mrspeiser)<br/>|[<img src="https://avatars.githubusercontent.com/u/985607?v=4" width="100px;"/><br/><sub><b>dead-horse</b></sub>](https://github.com/dead-horse)<br/>|
-| :---: | :---: | :---: | :---: | :---: | :---: |
-[<img src="https://avatars.githubusercontent.com/u/7326406?v=4" width="100px;"/><br/><sub><b>shaozj</b></sub>](https://github.com/shaozj)<br/>
+[![Contributors](https://contrib.rocks/image?repo=node-modules/formstream)](https://github.com/node-modules/formstream/graphs/contributors)
 
-This project follows the git-contributor [spec](https://github.com/xudafeng/git-contributor), auto updated at `Wed May 15 2024 00:34:12 GMT+0800`.
-
-<!-- GITCONTRIBUTOR_END -->
+Made with [contributors-img](https://contrib.rocks).

New alerts

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

Fixed alerts

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

Improved metrics

Dev dependency count

9

-10%

Worsened metrics

Total package byte prevSize

20799

-6.01%

Lines of code

407

-1.21%

Number of lines in readme file

212

-2.75%

No dependency changes