real-world-redux-api - npm Package Compare versions

Comparing version 1.0.38 to 1.0.39

index.js

@@ -1,3 +0,6 @@
-const filename = process.env.INIT_CWD
+import path from 'path'
+import fs from 'fs'
 
+const filename = path.dirname(fs.realpathSync(__filename))
+
 const API = {}
@@ -4,0 +7,0 @@

package.json

 {
   "name": "real-world-redux-api",
-  "version": "1.0.38",
+  "version": "1.0.39",
   "description": "API end point replacement for _DATA.js file in React NanoDegree Programe on Udacity",
@@ -20,3 +20,6 @@ "main": "index.js",
   "license": "MIT",
-  "dependencies": {}
+  "dependencies": {
+    "fs": "^0.0.1-security",
+    "path": "^0.12.7"
+  }
 }

New alerts

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

120789

increased by0.1%

Lines of code

269

increased by0.75%

Worsened metrics

Dependency count

2

increased byInfinity%

Number of low supply chain risk alerts

2

increased by100%

Dependency changes

• + Addedfs@^0.0.1-security

• + Addedpath@^0.12.7

• + Addedfs@0.0.1-security(transitive)

• + Addedinherits@2.0.3(transitive)

• + Addedpath@0.12.7(transitive)

• + Addedprocess@0.11.10(transitive)

• + Addedutil@0.10.4(transitive)