istanbul-lib-report - npm Package Compare versions

Comparing version 3.0.0 to 3.0.1

CHANGELOG.md

@@ -54,2 +54,9 @@ # Change Log
 
+## [3.0.1](https://github.com/istanbuljs/istanbuljs/compare/istanbul-lib-report-v3.0.0...istanbul-lib-report-v3.0.1) (2023-07-25)
+
+
+### Bug Fixes
+
+* **deps:** update make-dir CVE-2022-25883 ([eab82a9](https://github.com/istanbuljs/istanbuljs/commit/eab82a9aeff140a8fd2981c7f872830c985d479f))
+
 ## [2.0.8](https://github.com/istanbuljs/istanbuljs/compare/istanbul-lib-report@2.0.7...istanbul-lib-report@2.0.8) (2019-04-24)
@@ -56,0 +63,0 @@

package.json

 {
   "name": "istanbul-lib-report",
-  "version": "3.0.0",
+  "version": "3.0.1",
   "description": "Base reporting library for istanbul",
@@ -12,7 +12,7 @@ "author": "Krishnan Anantheswaran <[e-mail]>",
   "scripts": {
-    "test": "nyc --nycrc-path=../../monorepo-per-package-full.js mocha"
+    "test": "nyc mocha"
   },
   "dependencies": {
     "istanbul-lib-coverage": "^3.0.0",
-    "make-dir": "^3.0.0",
+    "make-dir": "^4.0.0",
     "supports-color": "^7.1.0"
@@ -43,5 +43,4 @@ },
   "engines": {
-    "node": ">=8"
-  },
-  "gitHead": "5319df684b508ff6fb19fe8b9a6147a3c5924e4b"
+    "node": ">=10"
+  }
 }

New alerts

New author

Supply chain risk

A new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

37641

increased by0.5%

Worsened metrics

Number of medium supply chain risk alerts

1

increased byInfinity%

Dependency changes

• + Addedlru-cache@6.0.0(transitive)

• + Addedmake-dir@4.0.0(transitive)

• + Addedsemver@7.6.0(transitive)

• + Addedyallist@4.0.0(transitive)

• - Removedmake-dir@3.1.0(transitive)

• - Removedsemver@6.3.1(transitive)

• Updatedmake-dir@^4.0.0