nano - npm Package Compare versions

Comparing version 10.1.3 to 10.1.4

package.json

@@ -7,3 +7,3 @@ {
   "repository": "http://github.com/apache/couchdb-nano",
-  "version": "10.1.3",
+  "version": "10.1.4",
   "author": "Apache CouchDB <[e-mail]> (http://couchdb.apache.org)",
@@ -21,12 +21,12 @@ "keywords": [
   "dependencies": {
-    "axios": "^1.6.2",
-    "qs": "^6.11.0",
-    "node-abort-controller": "^3.0.1"
+    "axios": "^1.7.4",
+    "qs": "^6.13.0",
+    "node-abort-controller": "^3.1.1"
   },
   "devDependencies": {
-    "@types/node": "^18.11.9",
-    "jest": "^29.2.2",
-    "nock": "^13.2.9",
+    "@types/node": "^22.3.0",
+    "jest": "^29.7.0",
+    "nock": "^13.5.4",
     "standard": "^17.1.0",
-    "typescript": "^4.8.4"
+    "typescript": "^5.5.4"
   },
@@ -33,0 +33,0 @@ "scripts": {

README.md

@@ -111,3 +111,3 @@ [![NPM](http://img.shields.io/npm/v/nano.svg?style=flat-square)](https://www.npmjs.com/package/nano)
 
-> Note: The URL you supply may also contain authentication credentials e.g. `http://admin:mypassword@localhost:5984`.
+> Note: Supplying authentication credentials in the URL e.g. `http://admin:mypassword@localhost:5984` is deprecated. Use `nano.auth` instead.
 
@@ -545,3 +545,3 @@ To create a new database:
 
-Removes a document from CouchDB whose `_id` is `docname` and who's revision is `_rev`:
+Removes a document from CouchDB whose `_id` is `docname` and whose revision (`_rev`) is `rev`:
 
@@ -715,3 +715,3 @@ ```js
 | fastChanges | Adds a seq_interval parameter to fetch changes more quickly | false           | true                             |   |
-| selector | Filters the changes feed with the supplied Mango selector | {"name":"fred}           | null                             |   |
+| selector | Filters the changes feed with the supplied Mango selector |    null       | {"name":"fred}                            |   |
 | timeout | The number of milliseconds a changes feed request waits for data| 60000         | 10000    |
@@ -718,0 +718,0 @@

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 1 instance in 1 package

Improved metrics

Number of low supply chain risk alerts

1

decreased by-50%

Worsened metrics

Total package byte prevSize

180985

decreased by-0.1%

Number of package files

12

decreased by-7.69%

Lines of code

3112

decreased by-0.26%

Dependency changes

• Updatedaxios@^1.7.4

• Updatednode-abort-controller@^3.1.1

• Updatedqs@^6.13.0