node-gyp - npm Package Compare versions

Comparing version 0.3.0 to 0.3.1

lib/install.js

@@ -118,2 +118,3 @@
       , badDownload = false
+      , extractCount = 0
       , parser = tar.Parse()
@@ -146,2 +147,4 @@
     function onEntry (entry) {
+      extractCount++
+
       var filename = entry.props.path
@@ -188,2 +191,5 @@ , trimmed = install.trim(filename)
       if (badDownload) return
+      if (extractCount === 0) {
+        return cb(new Error('There was a fatal problem while downloading the tarball'))
+      }
       gyp.verbose('done parsing tarball')
@@ -298,4 +304,7 @@ var async = 0
     return minimatch(file, 'src/*.h')
+      || minimatch(file, 'deps/http_parser/**/*.h')
+      || minimatch(file, 'deps/openssl/openssl/include/**/*.h')
       || minimatch(file, 'deps/v8/include/**/*.h')
       || minimatch(file, 'deps/uv/include/**/*.h')
+      || minimatch(file, 'deps/zlib/**/*.h')
       // non-legacy versions of node also extract the gyp build files
@@ -302,0 +311,0 @@ || (!isLegacy &&

package.json

 { "name": "node-gyp"
 , "description": "Node.js native addon build tool"
 , "keywords": [ "native", "addon", "module", "c", "c++", "bindings", "gyp" ]
-, "version": "0.3.0"
+, "version": "0.3.1"
 , "installVersion": 4
@@ -6,0 +6,0 @@ , "author": "Nathan Rajlich <[e-mail]> (http://tootallnate.net)"

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

New author

Supply chain risk

A new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

907946

increased by0.04%

Lines of code

923

increased by0.87%

Worsened metrics

Number of medium supply chain risk alerts

2

increased by100%

No dependency changes