mongodb-legacy
Advanced tools
Comparing version 6.0.1 to 6.1.0
{ | ||
"name": "mongodb-legacy", | ||
"description": "The legacy MongoDB driver with callback support for Node.js", | ||
"version": "6.0.1", | ||
"version": "6.1.0", | ||
"files": [ | ||
@@ -45,19 +45,18 @@ "src", | ||
"devDependencies": { | ||
"@microsoft/api-extractor-model": "^7.27.6", | ||
"@octokit/core": "^4.2.4", | ||
"@typescript-eslint/eslint-plugin": "^5.59.2", | ||
"@typescript-eslint/parser": "^5.59.2", | ||
"chai": "^4.3.7", | ||
"eslint-config-prettier": "^8.8.0", | ||
"@microsoft/api-extractor-model": "^7.28.14", | ||
"@typescript-eslint/eslint-plugin": "^7.7.0", | ||
"@typescript-eslint/parser": "^7.7.0", | ||
"chai": "^4.4.1", | ||
"eslint-config-prettier": "^8.10.0", | ||
"eslint-plugin-prettier": "^4.2.1", | ||
"mocha": "^10.2.0", | ||
"mocha": "^10.4.0", | ||
"nyc": "^15.1.0", | ||
"prettier": "^2.8.8", | ||
"sinon": "^15.2.0", | ||
"sinon": "^17.0.1", | ||
"sinon-chai": "^3.7.0", | ||
"source-map-support": "^0.5.21", | ||
"standard-version": "^9.5.0", | ||
"ts-node": "^10.9.1", | ||
"ts-node": "^10.9.2", | ||
"typescript": "^5.0.4" | ||
} | ||
} |
@@ -65,2 +65,20 @@ # MongoDB Node.js Driver with Optional Callback Support Legacy Package | ||
### Release Integrity | ||
The GitHub release contains a detached signature file for the NPM package (named | ||
`mongodb-legacy-X.Y.Z.tgz.sig`). | ||
The following command returns the link npm package. | ||
```shell | ||
npm view mongodb-legacy@vX.Y.Z dist.tarball | ||
``` | ||
Using the result of the above command, a `curl` command can return the official npm package for the release. | ||
To verify the integrity of the downloaded package, run the following command: | ||
```shell | ||
gpg --verify mongodb-legacy-X.Y.Z.tgz.sig mongodb-legacy-X.Y.Z.tgz | ||
``` | ||
### Versioning | ||
@@ -67,0 +85,0 @@ |
License Policy Violation
LicenseThis package is not allowed per your license policy. Review the package's license to ensure compliance.
Found 1 instance in 1 package
License Policy Violation
LicenseThis package is not allowed per your license policy. Review the package's license to ensure compliance.
Found 1 instance in 1 package
New author
Supply chain riskA new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.
Found 1 instance in 1 package
120302
15
144
0