gui - npm Package Compare versions

Comparing version 0.3.1 to 0.3.2

install.js

@@ -21,2 +21,5 @@ #!/usr/bin/env node
   nodever = nodever.substr(1)
+let platform = process.platform
+if (process.env.npm_config_platform)
+  platform = process.env.npm_config_platform
 let targetCpu = process.env.npm_config_arch
@@ -36,3 +39,3 @@ if (!targetCpu)
   darwin: 'mac',
-}[process.platform]
+}[platform]
 const filename = `node_yue_${runtime}_${shortver}_${version}_${targetOs}_${targetCpu}.zip`
@@ -43,5 +46,5 @@
 
-downloadYue(version, filename, __dirname, token).catch((e) => {
+downloadYue('yue', version, filename, __dirname, token).catch((e) => {
   console.error('Failed to download yue:', e.message)
   process.exit(1)
 })

package.json

 {
   "name": "gui",
-  "version": "0.3.1",
+  "version": "0.3.2",
   "description": "Bindings to Yue's GUI library",
@@ -12,8 +12,8 @@ "repository": "https://github.com/yue/node-gui",
   "dependencies": {
-    "download-yue": "1.x"
+    "download-yue": "2.x"
   },
   "engines": {
     "node": ">=8",
-    "electron": ">=1.6"
+    "electron": ">=1.7"
   }
 }

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

3017

increased by3.89%

Lines of code

43

increased by7.5%

Worsened metrics

Number of low supply chain risk alerts

7

increased by40%

Dependency changes

• + Addeddownload-yue@2.1.0(transitive)

• - Removeddownload-yue@1.1.1(transitive)

• Updateddownload-yue@2.x