glob - npm Package Compare versions

Comparing version 4.1.3 to 4.1.4

common.js

@@ -127,4 +127,7 @@ exports.alphasort = alphasort
   // at *some* point we statted all of these
-  if (self.mark)
-    all = all.map(self._mark, self)
+  if (self.mark) {
+    for (var i = 0; i < all.length; i++) {
+      all[i] = self._mark(all[i])
+    }
+  }
 
@@ -131,0 +134,0 @@ self.found = all

glob.js

@@ -397,3 +397,3 @@ // Approach:
   if (ownProp(this.cache, abs)) {
-    c = this.cache[abs]
+    var c = this.cache[abs]
     if (!c || c === 'FILE')
@@ -400,0 +400,0 @@ return cb()

package.json

@@ -5,3 +5,3 @@ {
   "description": "a little globber",
-  "version": "4.1.3",
+  "version": "4.1.4",
   "repository": {
@@ -12,2 +12,7 @@ "type": "git",
   "main": "glob.js",
+  "files": [
+    "glob.js",
+    "sync.js",
+    "common.js"
+  ],
   "engines": {
@@ -17,3 +22,2 @@ "node": "*"
   "dependencies": {
-    "graceful-fs": "^3.0.2",
     "inflight": "^1.0.4",
@@ -20,0 +24,0 @@ "inherits": "2",

sync.js

@@ -225,3 +225,3 @@ module.exports = globSync
   if (ownProp(this.cache, abs)) {
-    c = this.cache[abs]
+    var c = this.cache[abs]
     if (!c || c === 'FILE')
@@ -228,0 +228,0 @@ return null

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Shell access

Supply chain risk

This module accesses the system shell. Accessing the system shell increases the risk of executing arbitrary code.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 1 instance in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

Improved metrics

Dependency count

4

decreased by-20%

Number of low supply chain risk alerts

2

decreased by-75%

Number of medium supply chain risk alerts

0

decreased by-100%

Worsened metrics

Total package byte prevSize

40896

decreased by-41.77%

Number of package files

6

decreased by-82.35%

Lines of code

961

decreased by-51.71%

Dependency changes

• - Removedgraceful-fs@^3.0.2

• - Removedgraceful-fs@3.0.12(transitive)

• - Removednatives@1.1.6(transitive)