heroku-api-plugin - npm Package Compare versions

Comparing version 1.2.2 to 1.2.3

commands/api.js

 'use strict'
 
 const cli = require('heroku-cli-util')
-const fs = require('co-fs')
+const fs = require('fs')
 const {inspect} = require('util')
@@ -61,3 +61,3 @@
     if (request.method === 'PATCH' || request.method === 'PUT' || request.method === 'POST') {
-      let body = await fs.readFile('/dev/stdin', 'utf8')
+      let body = fs.readFileSync('/dev/stdin', 'utf8')
       let parsedBody
@@ -64,0 +64,0 @@ try {

package.json

 {
   "name": "heroku-api-plugin",
   "description": "access the Heroku API directly",
-  "version": "1.2.2",
+  "version": "1.2.3",
   "author": "Jeff Dickey @dickeyxxx",
@@ -10,4 +10,2 @@ "bugs": {
   "dependencies": {
-    "co": "^4.5.4",
-    "co-fs": "^1.2.0",
     "heroku-cli-util": "^6.2.0"
@@ -14,0 +12,0 @@ },

New alerts

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

Improved metrics

Dependency count

1

decreased by-66.67%

Worsened metrics

Total package byte prevSize

60059

decreased by-2.08%

Number of low supply chain risk alerts

2

increased by100%

Dependency changes

• - Removedco@^4.5.4

• - Removedco-fs@^1.2.0

• - Removedco-from-stream@0.0.0(transitive)

• - Removedco-fs@1.2.0(transitive)

• - Removedco-read@0.0.1(transitive)

• - Removedthunkify@0.0.1(transitive)