loadware - npm Package Compare versions

Comparing version 0.2.0 to 1.0.0

loadware.js

@@ -8,2 +8,3 @@ /*
 
+
 require('app-module-path').addPath(process.cwd());
@@ -97,5 +98,12 @@
   // ['a', 'b'] => [require('a'), require('b')]
-  middle = middle.map(mid => typeof mid === 'string' ? require(mid) : mid);
+  middle = middle.map(mid => {
+    if (typeof mid === 'string') {
+      // Fetches the absolute path from the root
+      // Note: this doesn't work: 'require(mid)'
+      return require(require('path').resolve(mid));
+    }
+    return mid;
+  });
 
   return middle;
 };

package.json

 {
   "name": "loadware",
-  "version": "0.2.0",
+  "version": "1.0.0",
   "description": "A library to make sense of a bunch of middleware definitions and return a simple array of middleware\"",
@@ -5,0 +5,0 @@ "main": "loadware.js",

New alerts

Dynamic require

Supply chain risk

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

Found 1 instance in 1 package

Fixed alerts

Dynamic require

Supply chain risk

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

Found 1 instance in 1 package

No v1

Quality

Package is not semver >=1. This means it is not stable and does not support ^ ranges.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

7215

2.4%

Lines of code

111

6.73%

Number of low quality alerts

0

-100%

No dependency changes