livejournal - npm Package Compare versions

Comparing version 0.0.2 to 0.0.3

package.json

 {
   "name": "livejournal",
-  "version": "0.0.2",
+  "version": "0.0.3",
   "description": "LiveJournal XMLRPC",
@@ -12,5 +12,5 @@ "keywords": ["livejournal", "blog"],
   "dependencies": {
-    "xmlrpc": ">=1.1.0"
+    "xmlrpc": "git://github.com/agentcooper/node-xmlrpc.git"
   },
   "main": "index"
 }

rpc.js

@@ -16,2 +16,8 @@ /*
 
+LJ.Deserializer.prototype.endBase64 = function(data) {
+  var buffer = new Buffer(data, 'base64');
+  this.push(String(buffer));
+  this.value = false;
+};
+
 var methods = [
@@ -18,0 +24,0 @@ 'checkfriends',

New alerts

Git dependency

Supply chain risk

Contains a dependency which resolves to a remote git URL. Dependencies fetched from git URLs are not immutable can be used to inject untrusted code or reduce the likelihood of a reproducible install.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

2939

increased by6.91%

Lines of code

93

increased by5.68%

Worsened metrics

Number of high supply chain risk alerts

1

increased byInfinity%

Dependency changes

• - Removedsax@1.2.4(transitive)

• - Removedxmlbuilder@8.2.2(transitive)

• - Removedxmlrpc@1.3.2(transitive)

• Updatedxmlrpc@git://github.com/agentcooper/node-xmlrpc.git