node-raspberrypi-usbboot - npm Package Compare versions

Comparing version 0.0.7 to 0.0.8-use-fork-of-node-usb-87875664fe8b4df61ddd716eec93ff69aa7ee5f4

CHANGELOG.md

@@ -7,2 +7,6 @@ # Change Log
 
+## v0.0.8 - 2018-10-10
+
+* Use fork of node-usb to disable libudev [Alexis Svinartchouk]
+
 ## v0.0.7 - 2018-07-06
@@ -9,0 +13,0 @@

package.json

 {
   "name": "node-raspberrypi-usbboot",
-  "version": "0.0.7",
+  "version": "0.0.8-use-fork-of-node-usb-87875664fe8b4df61ddd716eec93ff69aa7ee5f4",
   "description": "Transforms Raspberry Pi Compute Modules and Zeros to mass storage devices.",
@@ -28,3 +28,3 @@ "main": "build/index.js",
     "debug": "^3.1.0",
-    "usb": "^1.3.2"
+    "usb": "github:resin-io/node-usb#1.3.5"
   },
@@ -31,0 +31,0 @@ "devDependencies": {

New alerts

GitHub dependency

Supply chain risk

Contains a dependency which resolves to a GitHub URL. Dependencies fetched from GitHub specifiers are not immutable can be used to inject untrusted code or reduce the likelihood of a reproducible install.

Found 1 instance in 1 package

Empty package

Supply chain risk

Package does not contain any code. It may be removed, is name squatting, or the result of a faulty package publish.

Found 1 instance in 1 package

Major refactor

Supply chain risk

Package has recently undergone a major refactor. It may be unstable or indicate significant internal changes. Use caution when updating to versions that include significant changes.

Found 1 instance in 1 package

Fixed alerts

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

Improved metrics

Number of low supply chain risk alerts

0

decreased by-100%

Worsened metrics

Total package byte prevSize

27700857

decreased by-0.1%

Number of package files

19

decreased by-13.64%

Lines of code

0

decreased by-100%

Number of high supply chain risk alerts

1

increased byInfinity%

Number of medium supply chain risk alerts

15

increased by15.38%

Dependency changes

• - Removednode-addon-api@4.3.0(transitive)

• - Removednode-gyp-build@4.8.4(transitive)

• - Removedusb@1.9.2(transitive)

• Updatedusb@github:resin-io/node-usb#1.3.5