mediasoup - npm Package Compare versions

Comparing version 3.13.5 to 3.13.6

package.json

 {
   "name": "mediasoup",
-  "version": "3.13.5",
+  "version": "3.13.6",
   "description": "Cutting Edge WebRTC Video Conferencing",
@@ -24,7 +24,9 @@ "contributors": [
     "node/lib",
-    "worker/deps/libwebrtc",
+    "worker/src",
+    "worker/include",
     "worker/fbs",
+    "worker/test/src",
+    "worker/test/include",
+    "worker/fuzzer/src",
     "worker/fuzzer/include",
-    "worker/fuzzer/src",
-    "worker/include",
     "worker/scripts/*.mjs",
@@ -34,6 +36,5 @@ "worker/scripts/*.json",
     "worker/scripts/*.sh",
-    "worker/src",
     "worker/subprojects/*.wrap",
-    "worker/test/include",
-    "worker/test/src",
+    "worker/deps/libwebrtc",
+    "worker/tasks.py",
     "worker/Makefile",
@@ -54,2 +55,3 @@ "worker/meson.build",
   "scripts": {
+    "preinstall": "node npm-scripts.mjs preinstall",
     "prepare": "node npm-scripts.mjs prepare",
@@ -72,4 +74,2 @@ "postinstall": "node npm-scripts.mjs postinstall",
     "coverage:node": "node npm-scripts.mjs coverage:node",
-    "install-deps:node": "node npm-scripts.mjs install-deps:node",
-    "install-worker-dev-tools": "node npm-scripts.mjs install-worker-dev-tools",
     "release:check": "node npm-scripts.mjs release:check",
@@ -113,3 +113,3 @@ "release": "node npm-scripts.mjs release",
     "@types/jest": "^29.5.10",
-    "@types/node": "^20.9.4",
+    "@types/node": "^20.10.0",
     "@typescript-eslint/eslint-plugin": "^6.12.0",
@@ -116,0 +116,0 @@ "@typescript-eslint/parser": "^6.12.0",

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Install scripts

Supply chain risk

Install scripts are run when the package is installed. The majority of malware in npm is hidden in install scripts.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 2 instances in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 2 instances in 1 package

Improved metrics

Total package byte prevSize

4666774

increased by0.22%

Worsened metrics

Number of package files

1342

decreased by-0.07%

Lines of code

44984

decreased by-0.01%

Number of high supply chain risk alerts

2

increased by100%

Number of low supply chain risk alerts

32

increased by6.67%

No dependency changes