midi - npm Package Compare versions

Comparing version 0.4.0 to 0.5.0

midi.js

@@ -0,4 +1,7 @@
+var midi = require('./build/Release/midi');
+
+// MIDI input inherits from EventEmitter
 var EventEmitter = require('events').EventEmitter;
-var midi = require('./build/default/midi_addon');
 midi.input.prototype.__proto__ = EventEmitter.prototype;
+
 module.exports = midi;

package.json

 {
   "name": "midi",
-  "version": "v0.4.0",
+  "version": "v0.5.0",
   "scripts": {
-    "preinstall": "node-waf configure && node-waf build",
-    "preuninstall": "rm -rf build/*"
+    "preinstall": "make",
+    "test": "node test/virtual-loopback-test-automated.js"
   },
@@ -22,3 +22,3 @@ "main": "midi.js",
   "engines": {
-      "node": ">=0.4.0 <=0.5.4"
+      "node": ">=0.6.0"
   },
@@ -25,0 +25,0 @@ "repository" : {

README.md

@@ -11,4 +11,12 @@ ♪ ♫ ♩ ♬
 
-	$ node-waf configure && node-waf build
+From npm:
 
+    $ npm install midi
+    
+From source:
+    
+    $ git clone https://github.com/justinlatimer/node-midi.git
+    $ cd node-midi/
+    $ npm install
+
 ## Usage
@@ -15,0 +23,0 @@

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Install scripts

Supply chain risk

Install scripts are run when the package is installed. The majority of malware in npm is hidden in install scripts.

Found 1 instance in 1 package

Manifest confusion

Supply chain risk

This package has inconsistent metadata. This could be malicious or caused by an error when publishing the package.

Found 1 instance in 1 package

New author

Supply chain risk

A new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Install scripts

Supply chain risk

Install scripts are run when the package is installed. The majority of malware in npm is hidden in install scripts.

Found 1 instance in 1 package

Non-existent author

Supply chain risk

The package was published by an npm account that no longer exists.

Found 1 instance in 1 package

Manifest confusion

Supply chain risk

This package has inconsistent metadata. This could be malicious or caused by an error when publishing the package.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

698659

increased by0.26%

Number of package files

87

increased by4.82%

Lines of code

620

increased by9.15%

Number of lines in readme file

142

increased by5.97%

Number of high supply chain risk alerts

1

decreased by-50%

Worsened metrics

Number of medium supply chain risk alerts

2

increased by100%

No dependency changes