libnpmpack
Advanced tools
libnpmpack - npm Package Compare versions
Comparing version
| { | ||
| "name": "libnpmpack", | ||
| "version": "2.0.1", | ||
| "version": "6.0.3", | ||
| "description": "Programmatic API for the bits behind npm pack", | ||
| "author": "npm Inc. <support@npmjs.com>", | ||
| "author": "GitHub Inc.", | ||
| "main": "lib/index.js", | ||
| "contributors": [ | ||
| "Claudia Hernández <claudia@npmjs.com>" | ||
| ], | ||
| "main": "index.js", | ||
| "files": [ | ||
| "*.js" | ||
| "bin/", | ||
| "lib/" | ||
| ], | ||
| "license": "ISC", | ||
| "scripts": { | ||
| "preversion": "npm test", | ||
| "postversion": "npm publish", | ||
| "prepublishOnly": "git push origin --follow-tags", | ||
| "lint": "standard", | ||
| "lint": "eslint \"**/*.js\"", | ||
| "test": "tap", | ||
| "posttest": "npm run lint" | ||
| "posttest": "node ../.. run lint", | ||
| "postlint": "template-oss-check", | ||
| "lintfix": "node ../.. run lint -- --fix", | ||
| "snap": "tap", | ||
| "template-oss-apply": "template-oss-apply --force" | ||
| }, | ||
| "tap": { | ||
| "check-coverage": true | ||
| }, | ||
| "devDependencies": { | ||
| "nock": "^13.0.7", | ||
| "standard": "^16.0.3", | ||
| "tap": "^14.11.0" | ||
| "@npmcli/eslint-config": "^4.0.0", | ||
| "@npmcli/template-oss": "4.19.0", | ||
| "nock": "^13.3.3", | ||
| "spawk": "^1.7.1", | ||
| "tap": "^16.3.8" | ||
| }, | ||
| "repository": { | ||
| "type": "git", | ||
| "url": "https://github.com/npm/libnpmpack.git" | ||
| "url": "https://github.com/npm/cli.git", | ||
| "directory": "workspaces/libnpmpack" | ||
| }, | ||
@@ -37,9 +39,21 @@ "bugs": "https://github.com/npm/libnpmpack/issues", | ||
| "dependencies": { | ||
| "@npmcli/run-script": "^1.8.3", | ||
| "npm-package-arg": "^8.1.0", | ||
| "pacote": "^11.2.6" | ||
| "@npmcli/arborist": "^7.2.1", | ||
| "@npmcli/run-script": "^7.0.2", | ||
| "npm-package-arg": "^11.0.1", | ||
| "pacote": "^17.0.4" | ||
| }, | ||
| "engines": { | ||
| "node": ">=10" | ||
| "node": "^16.14.0 || >=18.0.0" | ||
| }, | ||
| "templateOSS": { | ||
| "//@npmcli/template-oss": "This file is partially managed by @npmcli/template-oss. Edits may be overwritten.", | ||
| "version": "4.19.0", | ||
| "content": "../../scripts/template-oss/index.js" | ||
| }, | ||
| "tap": { | ||
| "nyc-arg": [ | ||
| "--exclude", | ||
| "tap-snapshots/**" | ||
| ] | ||
| } | ||
| } |
@@ -5,4 +5,3 @@ # libnpmpack | ||
| [](https://npm.im/libnpmpack) | ||
| [](https://github.com/npm/libnpmpack/actions?query=workflow%3A%22Node+CI%22) | ||
| [](https://coveralls.io/github/npm/libnpmpack?branch=latest) | ||
| [](https://github.com/npm/cli/actions/workflows/ci-libnpmpack.yml) | ||
@@ -9,0 +8,0 @@ [`libnpmpack`](https://github.com/npm/libnpmpack) is a Node.js library for |
New alerts
Filesystem access
Supply chain riskAccesses the file system, and could potentially read sensitive data.
Found 1 instance in 1 package
Fixed alerts
New author
Supply chain riskA new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.
Found 1 instance in 1 package
Improved metrics
- Total package byte prevSize
5731
4.5%- Lines of code
59
28.26%- Number of medium supply chain risk alerts
0
-100%Worsened metrics
- Dependency count
4
33.33%- Dev dependency count
5
66.67%- Number of package files
4
-20%- Number of lines in readme file
56
-1.75%- Number of low supply chain risk alerts
1
Infinity%Dependency changes
+ Added
@npmcli/arborist@^7.2.1+ Added
@isaacs/cliui@8.0.2(transitive)+ Added
@isaacs/string-locale-compare@1.1.0(transitive)+ Added
@npmcli/agent@2.2.2(transitive)+ Added
@npmcli/arborist@7.5.4(transitive)+ Added
@npmcli/fs@3.1.1(transitive)+ Added
@npmcli/git@5.0.8(transitive)+ Added
@npmcli/installed-package-contents@2.1.0(transitive)+ Added
@npmcli/map-workspaces@3.0.6(transitive)+ Added
@npmcli/metavuln-calculator@7.1.1(transitive)+ Added
@npmcli/name-from-folder@2.0.0(transitive)+ Added
@npmcli/node-gyp@3.0.0(transitive)+ Added
@npmcli/package-json@5.2.1(transitive)+ Added
@npmcli/promise-spawn@7.0.2(transitive)+ Added
@npmcli/query@3.1.0(transitive)+ Added
@npmcli/redact@1.1.02.0.1(transitive)+ Added
@npmcli/run-script@7.0.48.1.0(transitive)+ Added
@pkgjs/parseargs@0.11.0(transitive)+ Added
@sigstore/bundle@2.3.2(transitive)+ Added
@sigstore/core@1.1.0(transitive)+ Added
@sigstore/protobuf-specs@0.3.3(transitive)+ Added
@sigstore/sign@2.3.2(transitive)+ Added
@sigstore/tuf@2.3.4(transitive)+ Added
@sigstore/verify@1.2.1(transitive)+ Added
@tufjs/canonical-json@2.0.0(transitive)+ Added
@tufjs/models@2.0.1(transitive)+ Added
abbrev@2.0.0(transitive)+ Added
agent-base@7.1.3(transitive)+ Added
ansi-regex@5.0.16.1.0(transitive)+ Added
ansi-styles@4.3.06.2.1(transitive)+ Added
bin-links@4.0.4(transitive)+ Added
brace-expansion@2.0.1(transitive)+ Added
cacache@18.0.4(transitive)+ Added
cmd-shim@6.0.3(transitive)+ Added
color-convert@2.0.1(transitive)+ Added
color-name@1.1.4(transitive)+ Added
common-ancestor-path@1.0.1(transitive)+ Added
cross-spawn@7.0.6(transitive)+ Added
cssesc@3.0.0(transitive)+ Added
eastasianwidth@0.2.0(transitive)+ Added
emoji-regex@8.0.09.2.2(transitive)+ Added
exponential-backoff@3.1.2(transitive)+ Added
foreground-child@3.3.1(transitive)+ Added
fs-minipass@3.0.3(transitive)+ Added
glob@10.4.5(transitive)+ Added
hosted-git-info@7.0.2(transitive)+ Added
http-proxy-agent@7.0.2(transitive)+ Added
https-proxy-agent@7.0.6(transitive)+ Added
ignore-walk@6.0.5(transitive)+ Added
ini@4.1.3(transitive)+ Added
is-fullwidth-code-point@3.0.0(transitive)+ Added
isexe@3.1.1(transitive)+ Added
jackspeak@3.4.3(transitive)+ Added
json-parse-even-better-errors@3.0.2(transitive)+ Added
json-stringify-nice@1.1.4(transitive)+ Added
just-diff@6.0.2(transitive)+ Added
just-diff-apply@5.5.0(transitive)+ Added
lru-cache@10.4.3(transitive)+ Added
make-fetch-happen@13.0.1(transitive)+ Added
minimatch@9.0.5(transitive)+ Added
minipass@7.1.2(transitive)+ Added
minipass-collect@2.0.1(transitive)+ Added
minipass-fetch@3.0.5(transitive)+ Added
node-gyp@10.3.1(transitive)+ Added
nopt@7.2.1(transitive)+ Added
normalize-package-data@6.0.2(transitive)+ Added
npm-bundled@3.0.1(transitive)+ Added
npm-install-checks@6.3.0(transitive)+ Added
npm-normalize-package-bin@3.0.1(transitive)+ Added
npm-package-arg@11.0.3(transitive)+ Added
npm-packlist@8.0.2(transitive)+ Added
npm-pick-manifest@9.1.0(transitive)+ Added
npm-registry-fetch@16.2.117.1.0(transitive)+ Added
package-json-from-dist@1.0.1(transitive)+ Added
pacote@17.0.718.0.6(transitive)+ Added
parse-conflict-json@3.0.1(transitive)+ Added
path-key@3.1.1(transitive)+ Added
path-scurry@1.11.1(transitive)+ Added
postcss-selector-parser@6.1.2(transitive)+ Added
proc-log@4.2.0(transitive)+ Added
proggy@2.0.0(transitive)+ Added
promise-all-reject-late@1.0.1(transitive)+ Added
promise-call-limit@3.0.2(transitive)+ Added
read-cmd-shim@4.0.0(transitive)+ Added
read-package-json@7.0.1(transitive)+ Added
read-package-json-fast@3.0.2(transitive)+ Added
shebang-command@2.0.0(transitive)+ Added
shebang-regex@3.0.0(transitive)+ Added
signal-exit@4.1.0(transitive)+ Added
sigstore@2.3.1(transitive)+ Added
socks-proxy-agent@8.0.5(transitive)+ Added
spdx-correct@3.2.0(transitive)+ Added
spdx-exceptions@2.5.0(transitive)+ Added
spdx-expression-parse@3.0.1(transitive)+ Added
spdx-license-ids@3.0.21(transitive)+ Added
ssri@10.0.6(transitive)+ Added
string-width@4.2.35.1.2(transitive)+ Added
strip-ansi@6.0.17.1.0(transitive)+ Added
treeverse@3.0.0(transitive)+ Added
tuf-js@2.2.1(transitive)+ Added
unique-filename@3.0.0(transitive)+ Added
unique-slug@4.0.0(transitive)+ Added
validate-npm-package-license@3.0.4(transitive)+ Added
validate-npm-package-name@5.0.1(transitive)+ Added
walk-up-path@3.0.1(transitive)+ Added
which@4.0.0(transitive)+ Added
wrap-ansi@7.0.08.1.0(transitive)+ Added
write-file-atomic@5.0.1(transitive)- Removed
@gar/promisify@1.1.3(transitive)- Removed
@npmcli/fs@1.1.1(transitive)- Removed
@npmcli/git@2.1.0(transitive)- Removed
@npmcli/installed-package-contents@1.0.7(transitive)- Removed
@npmcli/move-file@1.1.2(transitive)- Removed
@npmcli/node-gyp@1.0.3(transitive)- Removed
@npmcli/promise-spawn@1.3.2(transitive)- Removed
@npmcli/run-script@1.8.6(transitive)- Removed
@tootallnate/once@1.1.2(transitive)- Removed
abbrev@1.1.1(transitive)- Removed
agent-base@6.0.2(transitive)- Removed
agentkeepalive@4.6.0(transitive)- Removed
ajv@6.12.6(transitive)- Removed
ansi-regex@2.1.1(transitive)- Removed
aproba@1.2.0(transitive)- Removed
are-we-there-yet@1.1.7(transitive)- Removed
asn1@0.2.6(transitive)- Removed
assert-plus@1.0.0(transitive)- Removed
asynckit@0.4.0(transitive)- Removed
aws-sign2@0.7.0(transitive)- Removed
aws4@1.13.2(transitive)- Removed
bcrypt-pbkdf@1.0.2(transitive)- Removed
brace-expansion@1.1.11(transitive)- Removed
builtins@1.0.3(transitive)- Removed
cacache@15.3.0(transitive)- Removed
caseless@0.12.0(transitive)- Removed
code-point-at@1.1.0(transitive)- Removed
combined-stream@1.0.8(transitive)- Removed
concat-map@0.0.1(transitive)- Removed
console-control-strings@1.1.0(transitive)- Removed
core-util-is@1.0.21.0.3(transitive)- Removed
dashdash@1.14.1(transitive)- Removed
delayed-stream@1.0.0(transitive)- Removed
delegates@1.0.0(transitive)- Removed
ecc-jsbn@0.1.2(transitive)- Removed
extend@3.0.2(transitive)- Removed
extsprintf@1.3.0(transitive)- Removed
fast-deep-equal@3.1.3(transitive)- Removed
fast-json-stable-stringify@2.1.0(transitive)- Removed
forever-agent@0.6.1(transitive)- Removed
form-data@2.3.3(transitive)- Removed
fs.realpath@1.0.0(transitive)- Removed
gauge@2.7.4(transitive)- Removed
getpass@0.1.7(transitive)- Removed
glob@7.2.3(transitive)- Removed
har-schema@2.0.0(transitive)- Removed
har-validator@5.1.5(transitive)- Removed
has-unicode@2.0.1(transitive)- Removed
hosted-git-info@4.1.0(transitive)- Removed
http-proxy-agent@4.0.1(transitive)- Removed
http-signature@1.2.0(transitive)- Removed
https-proxy-agent@5.0.1(transitive)- Removed
humanize-ms@1.2.1(transitive)- Removed
ignore-walk@3.0.4(transitive)- Removed
infer-owner@1.0.4(transitive)- Removed
inflight@1.0.6(transitive)- Removed
inherits@2.0.4(transitive)- Removed
is-fullwidth-code-point@1.0.0(transitive)- Removed
is-typedarray@1.0.0(transitive)- Removed
isarray@1.0.0(transitive)- Removed
isstream@0.1.2(transitive)- Removed
jsbn@0.1.1(transitive)- Removed
json-parse-even-better-errors@2.3.1(transitive)- Removed
json-schema@0.4.0(transitive)- Removed
json-schema-traverse@0.4.1(transitive)- Removed
json-stringify-safe@5.0.1(transitive)- Removed
jsprim@1.4.2(transitive)- Removed
lru-cache@6.0.0(transitive)- Removed
make-fetch-happen@9.1.0(transitive)- Removed
mime-db@1.52.0(transitive)- Removed
mime-types@2.1.35(transitive)- Removed
minimatch@3.1.2(transitive)- Removed
minipass-collect@1.0.2(transitive)- Removed
minipass-fetch@1.4.1(transitive)- Removed
node-gyp@7.1.2(transitive)- Removed
nopt@5.0.0(transitive)- Removed
npm-bundled@1.1.2(transitive)- Removed
npm-install-checks@4.0.0(transitive)- Removed
npm-normalize-package-bin@1.0.1(transitive)- Removed
npm-package-arg@8.1.5(transitive)- Removed
npm-packlist@2.2.2(transitive)- Removed
npm-pick-manifest@6.1.1(transitive)- Removed
npm-registry-fetch@11.0.0(transitive)- Removed
npmlog@4.1.2(transitive)- Removed
number-is-nan@1.0.1(transitive)- Removed
oauth-sign@0.9.0(transitive)- Removed
object-assign@4.1.1(transitive)- Removed
once@1.4.0(transitive)- Removed
pacote@11.3.5(transitive)- Removed
path-is-absolute@1.0.1(transitive)- Removed
performance-now@2.1.0(transitive)- Removed
process-nextick-args@2.0.1(transitive)- Removed
psl@1.15.0(transitive)- Removed
punycode@2.3.1(transitive)- Removed
qs@6.5.3(transitive)- Removed
read-package-json-fast@2.0.3(transitive)- Removed
readable-stream@2.3.8(transitive)- Removed
request@2.88.2(transitive)- Removed
rimraf@3.0.2(transitive)- Removed
safe-buffer@5.1.2(transitive)- Removed
set-blocking@2.0.0(transitive)- Removed
signal-exit@3.0.7(transitive)- Removed
socks-proxy-agent@6.2.1(transitive)- Removed
sshpk@1.18.0(transitive)- Removed
ssri@8.0.1(transitive)- Removed
string-width@1.0.2(transitive)- Removed
string_decoder@1.1.1(transitive)- Removed
strip-ansi@3.0.1(transitive)- Removed
tough-cookie@2.5.0(transitive)- Removed
tunnel-agent@0.6.0(transitive)- Removed
tweetnacl@0.14.5(transitive)- Removed
unique-filename@1.1.1(transitive)- Removed
unique-slug@2.0.2(transitive)- Removed
uri-js@4.4.1(transitive)- Removed
uuid@3.4.0(transitive)- Removed
validate-npm-package-name@3.0.0(transitive)- Removed
verror@1.10.0(transitive)- Removed
wide-align@1.1.5(transitive)- Removed
wrappy@1.0.2(transitive)Updated
@npmcli/run-script@^7.0.2Updated
npm-package-arg@^11.0.1Updated
pacote@^17.0.4