node-pngcrush - npm Package Compare versions

Comparing version 0.0.1 to 0.0.2

binding.js

@@ -1,1 +0,28 @@
-module.exports = require('./build/Release/png_compress.node');
+var fs = require("fs"),
+    path = require("path"),
+    name = "png_compress.node",
+    tryList, i, count, file;
+
+tryList = [
+    path.join(__dirname, "build", "Release", name), // build dir
+    path.join(__dirname, "lib", process.platform, name) // prebuild lib
+];
+
+count = tryList.length;
+for (i = 0; i < count; i++) {
+    file = tryList[i];
+    if (fs.existsSync(file)) {
+        try {
+            exports = require(file);
+        } catch (e) {
+            continue; // try next
+        }
+        break;
+    }
+}
+
+if (exports && exports.PngCompress) {
+    module.exports = exports;
+} else {
+    throw new Error("Can't load addon.");
+}

package.json

 {
   "name": "node-pngcrush",
-  "version": "0.0.1",
+  "version": "0.0.2",
   "description": "The node-pngcrush is an addon of node, as a readable/writable stream",
@@ -10,4 +10,3 @@ "main": "index.js",
   "scripts": {
-    "test": "echo \"Error: no test specified\" && exit 1",
-    "install": "node install.js"
+    "test": "echo \"Error: no test specified\" && exit 1"
   },
@@ -14,0 +13,0 @@ "repository": {

README.md

@@ -9,3 +9,3 @@ ##node-pngcrush
 
-##使用
+##!使用
 
@@ -12,0 +12,0 @@ ```javascript

test/test.js

@@ -7,3 +7,3 @@ var C = require('..');
   if (err) throw err;
-  var buffer = C.compress(data);
+  var buffer = C.option('-v -bit_depth 8').compress(data);
   fs.writeFile('./alphatest_out.png', buffer, {
@@ -10,0 +10,0 @@ flags: 'wb'

New alerts

Native code

Supply chain risk

Contains native code (e.g., compiled binaries or shared libraries). Including native code can obscure malicious behavior.

Found 1 instance in 1 package

Dynamic require

Supply chain risk

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

Found 1 instance in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

Fixed alerts

Install scripts

Supply chain risk

Install scripts are run when the package is installed. The majority of malware in npm is hidden in install scripts.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

4226062

increased by20.69%

Number of package files

71

increased by4.41%

Lines of code

97

increased by49.23%

Number of high supply chain risk alerts

0

decreased by-100%

Worsened metrics

Number of low supply chain risk alerts

4

increased by300%

Number of medium supply chain risk alerts

5

increased by66.67%

No dependency changes