koa - npm Package Compare versions

Comparing version 2.16.2 to 2.16.3

lib/response.js

@@ -246,7 +246,2 @@
     if (referrer) {
-      // referrer is a relative path
-      if (referrer.startsWith('/')) {
-        return referrer;
-      }
-
       // referrer is an absolute URL, check if it's the same origin
@@ -253,0 +248,0 @@ const url = new URL(referrer, this.ctx.href);

package.json

 {
   "name": "koa",
-  "version": "2.16.2",
+  "version": "2.16.3",
   "publishConfig": {
@@ -28,9 +28,2 @@ "access": "public",
   },
-  "scripts": {
-    "test": "jest --forceExit",
-    "lint": "eslint --ignore-path .gitignore .",
-    "authors": "git log --format='%aN <%aE>' | sort -u > AUTHORS",
-    "build": "gen-esm-wrapper . ./dist/koa.mjs",
-    "prepare": "npm run build"
-  },
   "repository": "koajs/koa",
@@ -93,3 +86,9 @@ "keywords": [
     "testEnvironment": "node"
+  },
+  "scripts": {
+    "test": "jest --forceExit",
+    "lint": "eslint --ignore-path .gitignore .",
+    "authors": "git log --format='%aN <%aE>' | sort -u > AUTHORS",
+    "build": "gen-esm-wrapper . ./dist/koa.mjs"
   }
-}
+}

New alerts

Network access

Supply chain risk

This module accesses the network.

Found 4 instances in 1 package

Debug access

Supply chain risk

Uses debug, reflection and dynamic code execution features.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 1 instance in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

Fixed alerts

Network access

Supply chain risk

This module accesses the network.

Found 4 instances in 1 package

Debug access

Supply chain risk

Uses debug, reflection and dynamic code execution features.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 1 instance in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

Worsened metrics

Total package byte prevSize

62101

-0.23%

Lines of code

1645

-0.24%

No dependency changes