node-gyp-build - npm Package Compare versions

Comparing version 4.0.0 to 4.1.0

index.js

@@ -8,2 +8,3 @@ var fs = require('fs')
 
+var prebuildsOnly = !!process.env.PREBUILDS_ONLY
 var abi = process.versions.modules // TODO: support old node where this is undef
@@ -31,7 +32,9 @@ var runtime = isElectron() ? 'electron' : 'node'
 
-  var release = getFirst(path.join(dir, 'build/Release'), matchBuild)
-  if (release) return release
+  if (!prebuildsOnly) {
+    var release = getFirst(path.join(dir, 'build/Release'), matchBuild)
+    if (release) return release
 
-  var debug = getFirst(path.join(dir, 'build/Debug'), matchBuild)
-  if (debug) return debug
+    var debug = getFirst(path.join(dir, 'build/Debug'), matchBuild)
+    if (debug) return debug
+  }
 
@@ -38,0 +41,0 @@ // Find most specific flavor first

package.json

 {
   "name": "node-gyp-build",
-  "version": "4.0.0",
+  "version": "4.1.0",
   "description": "Build tool and bindings loader for node-gyp that supports prebuilds",
@@ -5,0 +5,0 @@ "main": "index.js",

New alerts

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 2 instances in 1 package

Fixed alerts

New author

Supply chain risk

A new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 2 instances in 1 package

Improved metrics

Total package byte prevSize

10783

increased by0.79%

Lines of code

210

increased by1.45%

Number of medium supply chain risk alerts

1

decreased by-50%

Worsened metrics

Number of low supply chain risk alerts

18

increased by28.57%

No dependency changes