node-pngquant-native - npm Package Compare versions

Comparing version 0.0.2 to 0.0.3

binding.js

@@ -21,3 +21,3 @@ var fs = require("fs"),
 for (i = 0, count = vars.length; i < count; i++) {
-    tryList.push(path.join(__dirname, "lib", process.platform, vars[i], name));
+    tryList.push(path.join(__dirname, "lib", process.platform, process.arch, vars[i], name));
 }
@@ -24,0 +24,0 @@

package.json

 {
   "name": "node-pngquant-native",
-  "version": "0.0.2",
+  "version": "0.0.3",
   "description": "pngquant native plugin of node",
@@ -11,3 +11,3 @@ "main": "index.js",
     "test": "echo \"Error: no test specified\" && exit 1",
-    "install": "node-gyp rebuild"
+    "install": "(node ./install.js 2> builderr.log) || (exit 0)"
   },
@@ -14,0 +14,0 @@ "repository": {

README.md

@@ -8,2 +8,7 @@ ##node-pngquant-native
     npm install -g node-pngquant-native
+    
+###环境要求
++ 编译pngquant，编译器必须支持C99
++ 符合[node-gyp环境要求](https://github.com/TooTallNate/node-gyp#installation)
++ Windows用户，如果安装失败，请clone win32分支进行编译
 
@@ -10,0 +15,0 @@ ##使用

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Install scripts

Supply chain risk

Install scripts are run when the package is installed. The majority of malware in npm is hidden in install scripts.

Found 1 instance in 1 package

Native code

Supply chain risk

Contains native code (e.g., compiled binaries or shared libraries). Including native code can obscure malicious behavior.

Found 4 instances in 1 package

Shell access

Supply chain risk

This module accesses the system shell. Accessing the system shell increases the risk of executing arbitrary code.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Native code

Supply chain risk

Contains native code (e.g., compiled binaries or shared libraries). Including native code can obscure malicious behavior.

Found 2 instances in 1 package

Improved metrics

Total package byte prevSize

1467982

increased by57.12%

Number of package files

43

increased by10.26%

Lines of code

75

increased by19.05%

Number of lines in readme file

32

increased by18.52%

Worsened metrics

Number of high supply chain risk alerts

1

increased byInfinity%

Number of medium supply chain risk alerts

6

increased by100%

No dependency changes