litfass - npm Package Compare versions

Comparing version 1.5.1 to 1.5.2

litfass.js

@@ -5,2 +5,3 @@ "use strict";
 
+const path = require('path');
 const puppeteer = require('puppeteer');
@@ -60,2 +61,13 @@ const getDisplays = require('displays');
 
+const purgeConfig = () => {
+    const configDir = process.env.NODE_CONFIG_DIR || path.join(process.cwd(), 'config');      
+    for (var cacheFile in require.cache) {
+        if (cacheFile.includes(configDir)) {
+            delete require.cache[cacheFile];
+        }
+    }
+    
+    delete require.cache[require.resolve('config')];
+};
+
 module.exports = new (class Litfass extends EventEmitter {
@@ -70,3 +82,3 @@ displays = [] // an array of displays after litfass was started
             process.env.SUPPRESS_NO_CONFIG_WARNING = true;
-            const config = require('config');
+            purgeConfig(); const config = require('config');
     
@@ -73,0 +85,0 @@ // read & resolve the configuration and create a deep copy

package.json

 {
   "name": "litfass",
-  "version": "1.5.1",
+  "version": "1.5.2",
   "description": "A library for advertising displays",
@@ -50,3 +50,6 @@ "keywords": [
     "puppeteer": "^2.1.1"
+  },
+  "resolutions": {
+    "config": "3.3.1"
   }
 }

New alerts

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

33001

increased by1.3%

Lines of code

344

increased by2.99%

Worsened metrics

Number of low supply chain risk alerts

2

increased by100%

No dependency changes