proton - npm Package Compare versions

Comparing version 0.1.3 to 0.2.0

lib/cli.js

 
 var proton  = require('proton'),
-    options = require('proton/options'),
+    options = require('proton/lib/options'),
     sys     = require('sys');
@@ -5,0 +5,0 @@

lib/options.js

@@ -19,3 +19,3 @@
     }
-    return path.replace(/^\.\//, '');
+    return base + '/' + path.replace(/^\.\//, '');
 }
@@ -22,0 +22,0 @@

lib/proton.js

 
-var jsgi     = require('jsgi/jsgi-node'),
-    promise  = require('promised-io/promise'),
+var jsgi     = require('jsgi'),
+    promise  = require('promised-io/lib/promise'),
     fs       = require('fs'),
@@ -5,0 +5,0 @@ daemon   = require("daemon"),

package.json

 {
     "name"         : "proton",
     "description"  : "Proton is a micro framework targetted at micro frameworks. It provides a common way for micro-frameworks to interoporate with the environment that runs them.",
-    "version"      : "0.1.3",
+    "version"      : "0.2.0",
     "engines"      : [ "node >=0.2.5" ],
@@ -6,0 +6,0 @@ "author"       : "Tom Yandell <[e-mail]> (http://tomyandell.wordpress.com/)",

README.md

@@ -0,1 +1,3 @@
+See <a href="http://use.no.de/proton">use.no.de/proton</a>.
+
 Introduction
@@ -2,0 +4,0 @@ ============

New alerts

Network access

Supply chain risk

This module accesses the network.

Found 1 instance in 1 package

Uses eval

Supply chain risk

Package uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Found 1 instance in 1 package

Dynamic require

Supply chain risk

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

Found 1 instance in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

Fixed alerts

Network access

Supply chain risk

This module accesses the network.

Found 1 instance in 1 package

Uses eval

Supply chain risk

Package uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Found 1 instance in 1 package

Dynamic require

Supply chain risk

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

Found 1 instance in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

96377

0.05%

Number of lines in readme file

110

1.85%

No dependency changes