hasha - npm Package Compare versions

Comparing version 5.1.0 to 5.2.0

index.js

@@ -7,12 +7,10 @@ 'use strict';
 
-const requireOptional = (name, defaultValue) => {
+const {Worker} = (() => {
 	try {
-		return require(name);
+		return require('worker_threads');
 	} catch (_) {
-		return defaultValue;
+		return {};
 	}
-};
+})();
 
-const {Worker} = requireOptional('worker_threads', {});
-
 let worker; // Lazy
@@ -19,0 +17,0 @@ let taskIdCounter = 0;

package.json

 {
 	"name": "hasha",
-	"version": "5.1.0",
+	"version": "5.2.0",
 	"description": "Hashing made simple. Get the hash of a buffer/string/stream/file.",
@@ -5,0 +5,0 @@ "license": "MIT",

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Dynamic require

Supply chain risk

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

Found 1 instance in 1 package

Improved metrics

Number of low supply chain risk alerts

3

decreased by-25%

Worsened metrics

Total package byte prevSize

15974

decreased by-0.47%

Lines of code

296

decreased by-0.34%

No dependency changes