ipfs-utils - npm Package Compare versions

Comparing version 8.1.5 to 8.1.6

dist/src/files/glob-source.d.ts

@@ -10,3 +10,3 @@ /// <reference types="node" />
     mode?: number | undefined;
-    mtime?: import("ipfs-unixfs/dist/src/types").MtimeLike | undefined;
+    mtime?: import("ipfs-unixfs/types/src/types").MtimeLike | undefined;
 } | undefined): AsyncGenerator<{
@@ -20,3 +20,3 @@ path: string;
     mode: number | undefined;
-    mtime: import("ipfs-unixfs/dist/src/types").MtimeLike | undefined;
+    mtime: import("ipfs-unixfs/types/src/types").MtimeLike | undefined;
 }, void, unknown>;
@@ -23,0 +23,0 @@ export = _exports;

dist/src/types.d.ts

@@ -1,2 +0,2 @@
-import { Readable as NodeReadableStream } from 'stream'
+import type { Readable as NodeReadableStream } from 'stream'
 
@@ -3,0 +3,0 @@ interface ProgressStatus {

package.json

 {
   "name": "ipfs-utils",
-  "version": "8.1.5",
+  "version": "8.1.6",
   "description": "Package to aggregate shared logic and dependencies for the IPFS ecosystem",
@@ -65,3 +65,3 @@ "main": "src/index.js",
     "native-fetch": "^3.0.0",
-    "node-fetch": "npm:@achingbrain/node-fetch@^2.6.4",
+    "node-fetch": "https://registry.npmjs.org/@achingbrain/node-fetch/-/node-fetch-2.6.7.tgz",
     "react-native-fetch-api": "^2.0.0",
@@ -74,3 +74,3 @@ "stream-to-it": "^0.2.2"
     "events": "^3.3.0",
-    "ipfs-unixfs": "^4.0.1",
+    "ipfs-unixfs": "^6.0.4",
     "it-all": "^1.0.4",
@@ -96,10 +96,11 @@ "it-drain": "^1.0.3",
     "Hector Sanjuan <[e-mail]>",
+    "André Costa Lima <[e-mail]>",
+    "Olivério Sousa <[e-mail]>",
+    "Roderik van der Veer <[e-mail]>",
+    "Stepan Yurtsiv <[e-mail]>",
     "Vasco Santos <[e-mail]>",
+    "Leo <[e-mail]>",
     "bluelovers <[e-mail]>",
-    "André Costa Lima <[e-mail]>",
-    "Leo <[e-mail]>",
-    "Marcin Rataj <[e-mail]>",
-    "Roderik van der Veer <[e-mail]>",
-    "Stepan Yurtsiv <[e-mail]>"
+    "Marcin Rataj <[e-mail]>"
   ]
 }

src/http/fetch.browser.js

@@ -91,3 +91,5 @@ 'use strict'
 
-    request.send(/** @type {BodyInit} */(options.body))
+    // @ts-expect-error options.body can be a node readable stream, which isn't compatible with XHR, but this
+    // file is a browser override so you won't get a node readable stream so ignore the error
+    request.send(options.body)
   })
@@ -94,0 +96,0 @@ }

src/types.d.ts

@@ -1,2 +0,2 @@
-import { Readable as NodeReadableStream } from 'stream'
+import type { Readable as NodeReadableStream } from 'stream'
 
@@ -3,0 +3,0 @@ interface ProgressStatus {

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

HTTP dependency

Supply chain risk

Contains a dependency which resolves to a remote HTTP URL which could be used to inject untrusted code and reduce overall package reliability.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Native code

Supply chain risk

Contains native code (e.g., compiled binaries or shared libraries). Including native code can obscure malicious behavior.

Found 1 instance in 1 package

Improved metrics

Lines of code

1276

increased by0.16%

Number of medium supply chain risk alerts

5

decreased by-16.67%

Worsened metrics

Total package byte prevSize

51447

decreased by-28.57%

Number of package files

57

decreased by-3.39%

Number of high supply chain risk alerts

1

increased byInfinity%

Dependency changes

• - Removed@achingbrain/node-fetch@2.6.7(transitive)

• Updatednode-fetch@https://registry.npmjs.org/@achingbrain/node-fetch/-/node-fetch-2.6.7.tgz