micromatch - npm Package Compare versions

Comparing version 2.3.6 to 2.3.7

lib/utils.js

@@ -6,37 +6,22 @@ 'use strict';
 var fileRe = require('filename-regex');
-var utils = require('lazy-cache')(require);
+var utils = module.exports;
 
 /**
- * Temporarily re-assign require to trick browserify
- * into recognizing lazy-cached deps.
+ * Module dependencies
  */
 
-/* eslint-disable no-undef */
-var fn = require;
-require = utils;
+utils.diff = require('arr-diff');
+utils.unique = require('array-unique');
+utils.braces = require('braces');
+utils.brackets = require('expand-brackets');
+utils.extglob = require('extglob');
+utils.isExtglob = require('is-extglob');
+utils.isGlob = require('is-glob');
+utils.typeOf = require('kind-of');
+utils.normalize = require('normalize-path');
+utils.omit = require('object.omit');
+utils.parseGlob = require('parse-glob');
+utils.cache = require('regex-cache');
 
 /**
- * Lazily required module dependencies
- */
-
-require('arr-diff', 'diff');
-require('array-unique', 'unique');
-require('braces');
-require('expand-brackets', 'brackets');
-require('extglob');
-require('is-extglob');
-require('is-glob', 'isGlob');
-require('kind-of', 'typeOf');
-require('normalize-path', 'normalize');
-require('object.omit', 'omit');
-require('parse-glob');
-require('regex-cache', 'cache');
-
-/**
- * Restore `require`
- */
-
-require = fn;
-
-/**
  * Get the filename of a filepath
@@ -43,0 +28,0 @@ *

package.json

 {
   "name": "micromatch",
   "description": "Glob matching for javascript/node.js. A drop-in replacement and faster alternative to minimatch and multimatch. Just use `micromatch.isMatch()` instead of `minimatch()`, or use `micromatch()` instead of `multimatch()`.",
-  "version": "2.3.6",
+  "version": "2.3.7",
   "homepage": "https://github.com/jonschlinkert/micromatch",
@@ -33,3 +33,2 @@ "author": "Jon Schlinkert (https://github.com/jonschlinkert)",
     "kind-of": "^3.0.2",
-    "lazy-cache": "^1.0.0",
     "normalize-path": "^2.0.1",
@@ -36,0 +35,0 @@ "object.omit": "^2.0.0",

Fixed alerts

Dynamic require

Supply chain risk

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

Found 1 instance in 1 package

Improved metrics

Dependency count

13

decreased by-7.14%

Number of low supply chain risk alerts

0

decreased by-100%

Worsened metrics

Total package byte prevSize

47191

decreased by-0.35%

Lines of code

962

decreased by-1.13%

Dependency changes

• - Removedlazy-cache@^1.0.0

• - Removedlazy-cache@1.0.4(transitive)