galvatron - npm Package Compare versions

Comparing version 0.7.6 to 0.7.7

package.json

@@ -6,3 +6,3 @@ {
   },
-  "version": "0.7.6",
+  "version": "0.7.7",
   "description": "Library that applies pre and post transforms to CommonJS files, traces their dependencies and concatenates them.",
@@ -9,0 +9,0 @@ "main": "index.js",

src/fs.js

@@ -77,9 +77,7 @@ 'use strict';
 
-            if (pkg.main) {
-              // otherwise, return the module's main entry point.
-              var pkgMain = path.join(checkDir, pkg.main);
-              if (fs.existsSync(pkgMain)) {
-                foundFile = pkgMain;
-                break check;
-              }
+            // otherwise, return the module's main entry point.
+            var pkgMain = path.join(checkDir, pkg.main || 'index.js');
+            if (fs.existsSync(pkgMain)) {
+              foundFile = pkgMain;
+              break check;
             }
@@ -86,0 +84,0 @@ }

Fixed alerts

New author

Supply chain risk

A new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.

Found 1 instance in 1 package

Improved metrics

Number of medium supply chain risk alerts

1

decreased by-50%

Worsened metrics

Total package byte prevSize

38866

decreased by-0.1%

Lines of code

820

decreased by-0.24%

No dependency changes