package-store - npm Package Compare versions

Comparing version 0.13.1 to 0.14.0

lib/storeController/index.d.ts

 import { FetchFunction, RequestPackageFunction, ResolveFunction } from '@pnpm/package-requester';
+import { ImportPackageFunction } from './createImportPackage';
 export interface StoreController {
     requestPackage: RequestPackageFunction;
+    importPackage: ImportPackageFunction;
     close(): Promise<void>;
@@ -20,2 +22,3 @@ updateConnections(prefix: string, opts: {
     networkConcurrency?: number;
+    packageImportMethod?: 'auto' | 'hardlink' | 'copy' | 'reflink';
 }): Promise<StoreController>;

lib/storeController/index.js

@@ -21,2 +21,3 @@ "use strict";
 const storeIndex_1 = require("../fs/storeIndex");
+const createImportPackage_1 = require("./createImportPackage");
 function default_1(resolve, fetchers, initOpts) {
@@ -39,2 +40,3 @@ return __awaiter(this, void 0, void 0, function* () {
             close: () => __awaiter(this, void 0, void 0, function* () { yield unlock(); }),
+            importPackage: createImportPackage_1.default(initOpts.packageImportMethod),
             prune,
@@ -41,0 +43,0 @@ requestPackage,

package.json

 {
   "name": "package-store",
   "description": "A storage for npm packages. Used by pnpm",
-  "version": "0.13.1",
+  "version": "0.14.0",
   "author": {
@@ -26,3 +26,4 @@ "name": "Zoltan Kochan",
     "@types/load-json-file": "^2.0.5",
-    "@types/node": "^8.0.34",
+    "@types/mz": "^0.0.32",
+    "@types/node": "^9.3.0",
     "@types/ramda": "^0.25.0",
@@ -32,2 +33,5 @@ "drive-by-path": "^1.0.0",
     "load-json-file": "^4.0.0",
+    "mkdirp-promise": "^5.0.1",
+    "mz": "^2.7.0",
+    "ncp": "^2.0.0",
     "os-homedir": "^1.0.2",
@@ -40,2 +44,3 @@ "p-filter": "^1.0.0",
     "rimraf-then": "^1.0.1",
+    "util.promisify": "^1.0.0",
     "write-json-file": "^2.2.0"
@@ -42,0 +47,0 @@ },

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Shell access

Supply chain risk

This module accesses the system shell. Accessing the system shell increases the risk of executing arbitrary code.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

35955

increased by53.28%

Number of package files

27

increased by28.57%

Lines of code

435

increased by60.52%

Worsened metrics

Dependency count

23

increased by27.78%

Number of medium supply chain risk alerts

1

increased byInfinity%

Dependency changes

• + Added@types/mz@^0.0.32

• + Addedmkdirp-promise@^5.0.1

• + Addedmz@^2.7.0

• + Addedncp@^2.0.0

• + Addedutil.promisify@^1.0.0

• + Added@types/node@9.6.61(transitive)

• + Addedncp@2.0.0(transitive)

• - Removed@types/node@8.10.66(transitive)

• Updated@types/node@^9.3.0