ipfs-utils - npm Package Compare versions

Comparing version 3.0.0 to 4.0.0

CHANGELOG.md

@@ -0,1 +1,11 @@
+<a name="4.0.0"></a>
+# [4.0.0](https://github.com/ipfs/js-ipfs-utils/compare/v3.0.0...v4.0.0) (2020-10-10)
+
+
+### Bug Fixes
+
+* use native fetch if available ([#62](https://github.com/ipfs/js-ipfs-utils/issues/62)) ([9b0ff2f](https://github.com/ipfs/js-ipfs-utils/commit/9b0ff2f))
+
+
+
 <a name="3.0.0"></a>
@@ -2,0 +12,0 @@ # [3.0.0](https://github.com/ipfs/js-ipfs-utils/compare/v2.4.0...v3.0.0) (2020-08-18)

package.json

 {
   "name": "ipfs-utils",
-  "version": "3.0.0",
+  "version": "4.0.0",
   "description": "Package to aggregate shared logic and dependencies for the IPFS ecosystem",
@@ -19,3 +19,4 @@ "main": "src/index.js",
     "./src/path-join.js": "./src/path-join.browser.js",
-    "./test/files/glob-source.spec.js": false
+    "./test/files/glob-source.spec.js": false,
+    "@achingbrain/electron-fetch": false
   },
@@ -38,4 +39,5 @@ "repository": "github:ipfs/js-ipfs-utils",
     "abort-controller": "^3.0.0",
-    "any-signal": "^1.1.0",
+    "any-signal": "^2.1.0",
     "buffer": "^5.6.0",
+    "@achingbrain/electron-fetch": "^1.7.2",
     "err-code": "^2.0.0",
@@ -48,2 +50,4 @@ "fs-extra": "^9.0.1",
     "nanoid": "^3.1.3",
+    "native-abort-controller": "0.0.3",
+    "native-fetch": "^2.0.0",
     "node-fetch": "^2.6.0",
@@ -50,0 +54,0 @@ "stream-to-it": "^0.2.0"

src/http.js

 /* eslint-disable no-undef */
 'use strict'
 
-const fetch = require('node-fetch')
+const {
+  default: fetch,
+  Request,
+  Headers
+} = require('./fetch')
 const merge = require('merge-options').bind({ ignoreUndefined: true })
 const { URL, URLSearchParams } = require('iso-url')
 const TextDecoder = require('./text-decoder')
-const AbortController = require('abort-controller')
+const AbortController = require('native-abort-controller')
 const anySignal = require('any-signal')
 
-const Request = fetch.Request
-const Headers = fetch.Headers
-
 class TimeoutError extends Error {
@@ -15,0 +16,0 @@ constructor () {

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Native code

Supply chain risk

Contains native code (e.g., compiled binaries or shared libraries). Including native code can obscure malicious behavior.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

51527

increased by15.29%

Number of package files

25

increased by8.7%

Lines of code

860

increased by1.18%

Number of medium supply chain risk alerts

2

decreased by-33.33%

Worsened metrics

Dependency count

15

increased by25%

Dependency changes

• + Added@achingbrain/electron-fetch@^1.7.2

• + Addednative-abort-controller@0.0.3

• + Addednative-fetch@^2.0.0

• + Added@achingbrain/electron-fetch@1.7.2(transitive)

• + Addedany-signal@2.1.2(transitive)

• + Addeddefine-data-property@1.1.4(transitive)

• + Addeddefine-properties@1.2.1(transitive)

• + Addedencoding@0.1.13(transitive)

• + Addedes-define-property@1.0.0(transitive)

• + Addedes-errors@1.3.0(transitive)

• + Addedfunction-bind@1.1.2(transitive)

• + Addedget-intrinsic@1.2.4(transitive)

• + Addedglobalthis@1.0.4(transitive)

• + Addedgopd@1.0.1(transitive)

• + Addedhas-property-descriptors@1.0.2(transitive)

• + Addedhas-proto@1.0.3(transitive)

• + Addedhas-symbols@1.0.3(transitive)

• + Addedhasown@2.0.2(transitive)

• + Addediconv-lite@0.6.3(transitive)

• + Addednative-abort-controller@0.0.31.0.4(transitive)

• + Addednative-fetch@2.0.1(transitive)

• + Addedobject-keys@1.1.1(transitive)

• + Addedsafer-buffer@2.1.2(transitive)

• - Removedany-signal@1.2.0(transitive)

• Updatedany-signal@^2.1.0