graceful-fs - npm Package Compare versions

Comparing version 3.0.3 to 3.0.4

fs.js

@@ -1,5 +0,11 @@
-// extend the builtin so that our monkeypatchery doesn't
-// muck with things not using graceful-fs
+// eeeeeevvvvviiiiiiillllll
+// more evil than monkey-patching the native builtin?
+// Not sure.
 
-var util = require('util')
-module.exports = util._extend({}, require('fs'))
+var mod = require("module")
+var pre = '(function (exports, require, module, __filename, __dirname) { '
+var post = '});'
+var src = pre + process.binding('natives').fs + post
+var vm = require('vm')
+var fn = vm.runInThisContext(src)
+return fn(exports, require, module, __filename, __dirname)

package.json

@@ -5,3 +5,3 @@ {
   "description": "A drop-in replacement for fs, making various improvements.",
-  "version": "3.0.3",
+  "version": "3.0.4",
   "repository": {
@@ -37,3 +37,8 @@ "type": "git",
   ],
-  "license": "BSD"
+  "license": "BSD",
+  "devDependencies": {
+    "mkdirp": "^0.5.0",
+    "rimraf": "^2.2.8",
+    "tap": "^0.4.13"
+  }
 }

New alerts

Debug access

Supply chain risk

Uses debug, reflection and dynamic code execution features.

Found 2 instances in 1 package

Fixed alerts

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

16852

increased by14.21%

Number of package files

11

increased by10%

Lines of code

505

increased by18.27%

Worsened metrics

Dev dependency count

3

increased byInfinity%

No dependency changes