metro-cache-key - npm Package Compare versions

Comparing version 0.63.0 to 0.64.0

package.json

 {
   "name": "metro-cache-key",
-  "version": "0.63.0",
+  "version": "0.64.0",
   "description": "🚇 Cache key utility.",
@@ -16,4 +16,4 @@ "main": "src/index.js",
   "devDependencies": {
-    "ob1": "0.63.0"
+    "ob1": "0.64.0"
   }
 }

src.real/index.js

@@ -7,20 +7,20 @@ /**
  *
- * @flow
+ *
  * @format
  */
+"use strict";
 
-'use strict';
+const crypto = require("crypto");
 
-const crypto = require('crypto');
-const fs = require('fs');
+const fs = require("fs");
 
-function getCacheKey(files: Array<string>): string {
+function getCacheKey(files) {
   return files
     .reduce(
-      (hash, file) => hash.update('\0', 'utf8').update(fs.readFileSync(file)),
-      crypto.createHash('md5'),
+      (hash, file) => hash.update("\0", "utf8").update(fs.readFileSync(file)),
+      crypto.createHash("md5")
     )
-    .digest('hex');
+    .digest("hex");
 }
 
 module.exports = getCacheKey;

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

New author

Supply chain risk

A new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.

Found 1 instance in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

Improved metrics

Number of medium supply chain risk alerts

0

decreased by-100%

Worsened metrics

Total package byte prevSize

2572

decreased by-9.63%

Lines of code

42

decreased by-37.31%

No dependency changes