npminstall - npm Package Compare versions

Comparing version 4.5.1 to 4.5.2

History.md

 
+4.5.2 / 2019-12-15
+==================
+
+**fixes**
+  * [[`2054f10`](http://github.com/cnpm/npminstall/commit/2054f10c442f0dcd3b06e03845413af5af9f66ac)] - fix: the vulnerabilities same as npm cli (#319) (fengmk2 <<[e-mail]>>)
+
 4.5.1 / 2019-12-07
@@ -3,0 +9,0 @@ ==================

lib/bin.js

@@ -8,2 +8,3 @@ 'use strict';
 const cmdShim = require('cmd-shim-hotfix');
+const normalize = require('npm-normalize-package-bin');
 const utils = require('./utils');
@@ -14,2 +15,5 @@
 async function bin(parentDir, pkg, pkgDir, options) {
+  // security fix
+  // https://github.com/npm/cli/commit/19ce061a2ee165d8de862c8f0f733c222846b9e1#diff-b05945a9118978f01ad9162683e74404
+  normalize(pkg);
   let bins = pkg.bin || {};
@@ -16,0 +20,0 @@ if (typeof bins === 'string') {

package.json

 {
   "name": "npminstall",
-  "version": "4.5.1",
+  "version": "4.5.2",
   "description": "Let npm install fast and easy",
@@ -46,2 +46,3 @@ "main": "lib/index.js",
     "normalize-package-data": "^2.5.0",
+    "npm-normalize-package-bin": "^1.0.1",
     "npm-package-arg": "^4.2.1",
@@ -48,0 +49,0 @@ "ora": "^3.4.0",

No alert changes

Improved metrics

Total package byte prevSize

170673

increased by0.29%

Lines of code

3654

increased by0.11%

Worsened metrics

Dependency count

29

increased by3.57%

Dependency changes

• + Addednpm-normalize-package-bin@^1.0.1

• + Addednpm-normalize-package-bin@1.0.1(transitive)