node-pngcrush - npm Package Compare versions

Comparing version 0.2.0 to 0.2.1

binding.js

@@ -1,4 +0,17 @@
-
 'use strict';
 
+var fs = require('fs');
+
+var buildModule = __dirname + '/build/Release/png_compress.node';
+
+if (fs.existsSync(buildModule)) {
+    try {
+        module.exports = require(buildModule);
+    } catch (e) {
+        console.log('Cant\'t load `.node` module ' + buildModule);
+        throw e;
+    }
+    return;
+}
+
 function compiler(a, b) {
@@ -5,0 +18,0 @@

package.json

 {
   "name": "node-pngcrush",
-  "version": "0.2.0",
+  "version": "0.2.1",
   "description": "The node-pngcrush is an addon of node, as a readable/writable stream",
@@ -5,0 +5,0 @@ "main": "index.js",

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Dynamic require

Supply chain risk

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

Found 1 instance in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

10315359

Lines of code

70

increased by18.64%

Worsened metrics

Number of low supply chain risk alerts

3

increased by200%

No dependency changes