libxl - npm Package Compare versions

Comparing version 0.2.16 to 0.2.17

CHANGELOG.md

@@ -10,1 +10,6 @@ # Changelog
  * Bump nan, fix resulting build issues -> io.js 3.2 support
+
+## 0.2.17
+
+ * Bump npm dependency versions.
+ * Migrate from MD5 to md5.

install-libxl.js

@@ -32,3 +32,3 @@ /**
     util = require('util'),
-    md5 = require('MD5'),
+    md5 = require('md5'),
     zlib = require('zlib'),
@@ -35,0 +35,0 @@ tar = require('tar');

package.json

@@ -5,3 +5,3 @@ {
   "license": "MIT",
-  "version": "0.2.16",
+  "version": "0.2.17",
   "description": "Node bindings for the libxl library for reading and writing excel (XLS and XLSX) spreadsheets.",
@@ -30,9 +30,9 @@ "keywords": [
   "dependencies": {
-    "MD5": "~1.2.1",
+    "md5": "~2.0.0",
     "adm-zip": "~0.4.7",
-    "ftp": "~0.3.8",
+    "ftp": "~0.3.10",
     "nan": "~2.0.8",
-    "tar": "~2.0.1",
-    "tmp": "~0.0.24"
+    "tar": "~2.2.0",
+    "tmp": "~0.0.27"
   }
 }

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

AI-detected potential code anomaly

Supply chain risk

AI has identified unusual behaviors that may pose a security risk.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

299035

increased by0.02%

Worsened metrics

Number of low supply chain risk alerts

9

increased by12.5%

Dependency changes

• + Addedmd5@~2.0.0

• + Addedis-buffer@1.0.2(transitive)

• + Addedmd5@2.0.0(transitive)

• + Addedtar@2.2.2(transitive)

• - RemovedMD5@~1.2.1

• - RemovedMD5@1.2.2(transitive)

• - Removedtar@2.0.1(transitive)

• Updatedftp@~0.3.10

• Updatedtar@~2.2.0

• Updatedtmp@~0.0.27