keydb - npm Package Compare versions

Comparing version 0.1.6 to 0.1.7

lib/drivers/dynamo.js

@@ -10,2 +10,7 @@ var aws = require('aws-sdk');
   var prefix = '';
+  var defaultRegion = aws.config.region;
+  if (!defaultRegion || defaultRegion === '') {
+    defaultRegion = 'us-east1';
+  }
+  var region = options.region || process.env.KEYDB_DRIVERS_DYNAMO_REGION || defaultRegion;
 
@@ -17,8 +22,10 @@ if (options.database) {
   if (options.local || process.env.KEYDB_DRIVERS_DYNAMO_LOCAL) {
+    var port = options.port || process.env.KEYDB_DRIVERS_DYNAMO_PORT || 8000;
     _db = new aws.DynamoDB({
       credentials: new aws.Credentials({accessKeyId: 'dynamodblocal', secretAccessKey: 'xyz'}),
-      region: 'us-east1',
-      endpoint: new aws.Endpoint('http://localhost:' + (options.port || 8000))
+      region: region,
+      endpoint: new aws.Endpoint('http://localhost:' + port)
     });
   } else {
+    aws.config.region = region;
     _db = new aws.DynamoDB();
@@ -25,0 +32,0 @@ }

package.json

 {
   "name": "keydb",
-  "version": "0.1.6",
+  "version": "0.1.7",
   "description": "Key/value data/query API to use on the server and in the browser.",
@@ -34,4 +34,5 @@ "main": "index-server.js",
     "chai-as-promised": "~4.1.0",
-    "dynamo-local": "0.0.2"
+    "dynamo-local": "0.0.2",
+    "portfinder": "~0.2.1"
   }
 }

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 2 instances in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

New author

Supply chain risk

A new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

71305

increased by0.47%

Lines of code

2179

increased by0.32%

Number of medium supply chain risk alerts

0

decreased by-100%

Worsened metrics

Dev dependency count

6

increased by20%

Number of low supply chain risk alerts

13

increased by18.18%

No dependency changes