gps2json - npm Package Compare versions

Comparing version 1.0.4 to 1.0.5

package.json

 {
   "name": "gps2json",
-  "version": "1.0.4",
+  "version": "1.0.5",
   "description": "CLI to pull photo meta GPS data into a JSON file",
@@ -23,3 +23,2 @@ "main": "src/gps2json.js",
   "dependencies": {
-    "app-root-path": "^2.1.0",
     "exif": "^0.6.0"
@@ -26,0 +25,0 @@ },

src/gps2json.js

@@ -6,3 +6,2 @@ #!/usr/bin/env node
 const process = require( "process" );
-const app_root = require('app-root-path').path;
 const ExifImage = require('exif').ExifImage;
@@ -13,4 +12,4 @@ const args = process.argv.filter((itm)=> { return !/\/bin\/gps2json/g.test(itm) && !/\/bin\/node/g.test(itm) ? itm : undefined});
   name: 'metadata',
-  folder: app_root,
-  output: app_root
+  folder: process.env.PWD,
+  output: process.env.PWD
 }
@@ -27,3 +26,3 @@
     })[0].split('=')[1];
-    options[option] = options[option].indexOf('./') > -1 ? path.join(app_root, options[option]) : options[option];
+    options[option] = options[option].indexOf('./') > -1 ? path.join(process.env.PWD, options[option]) : options[option];
   }
@@ -30,0 +29,0 @@ }

New alerts

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 1 instance in 1 package

Improved metrics

Dependency count

1

decreased by-50%

Worsened metrics

Total package byte prevSize

25041372

decreased by-0.01%

Number of package files

8

decreased by-11.11%

Lines of code

46

decreased by-2.13%

Number of low supply chain risk alerts

4

increased by300%

Dependency changes

• - Removedapp-root-path@^2.1.0

• - Removedapp-root-path@2.2.1(transitive)