pacote - npm Package Compare versions

Comparing version 15.1.2 to 15.1.3

lib/dir.js

 const Fetcher = require('./fetcher.js')
 const FileFetcher = require('./file.js')
-const Minipass = require('minipass')
+const { Minipass } = require('minipass')
 const tarCreateOptions = require('./util/tar-create-options.js')
@@ -5,0 +5,0 @@ const packlist = require('npm-packlist')

lib/fetcher.js

@@ -21,3 +21,3 @@ // This is the base class that the other fetcher types in lib
 const readPackageJson = promisify(require('read-package-json'))
-const Minipass = require('minipass')
+const { Minipass } = require('minipass')
 
@@ -24,0 +24,0 @@ const cacheDir = require('./util/cache-dir.js')

lib/git.js

@@ -9,3 +9,3 @@ const Fetcher = require('./fetcher.js')
 const npa = require('npm-package-arg')
-const Minipass = require('minipass')
+const { Minipass } = require('minipass')
 const cacache = require('cacache')
@@ -12,0 +12,0 @@ const log = require('proc-log')

lib/remote.js

@@ -6,3 +6,3 @@ const Fetcher = require('./fetcher.js')
 const fetch = require('npm-registry-fetch')
-const Minipass = require('minipass')
+const { Minipass } = require('minipass')
 
@@ -9,0 +9,0 @@ const _cacheFetches = Symbol.for('pacote.Fetcher._cacheFetches')

package.json

 {
   "name": "pacote",
-  "version": "15.1.2",
+  "version": "15.1.3",
   "description": "JavaScript package downloader",
@@ -53,3 +53,3 @@ "author": "GitHub Inc.",
     "fs-minipass": "^3.0.0",
-    "minipass": "^4.0.0",
+    "minipass": "^5.0.0",
     "npm-package-arg": "^10.0.0",
@@ -56,0 +56,0 @@ "npm-packlist": "^7.0.0",

Fixed alerts

New author

Supply chain risk

A new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

73553

increased by0.02%

Number of medium supply chain risk alerts

4

decreased by-20%

Published versions last months

6

increased by20%

Dependency changes

• - Removedminipass@4.2.8(transitive)

• Updatedminipass@^5.0.0