redis-memory-server - npm Package Compare versions

Comparing version 0.14.1 to 0.15.0

lib/util/RedisBinaryDownload.js

 "use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
 var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
@@ -21,3 +54,3 @@ function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
 const https_1 = __importDefault(require("https"));
-const tar_1 = __importDefault(require("tar"));
+const tar = __importStar(require("tar"));
 const extract_zip_1 = __importDefault(require("extract-zip"));
@@ -176,3 +209,3 @@ const RedisBinaryDownloadUrl_1 = __importDefault(require("./RedisBinaryDownloadUrl"));
         return __awaiter(this, void 0, void 0, function* () {
-            yield tar_1.default.extract({
+            yield tar.extract({
                 file: redisArchive,
@@ -179,0 +212,0 @@ cwd: extractDir,

package.json

 {
   "name": "redis-memory-server",
-  "version": "0.14.1",
+  "version": "0.15.0",
   "description": "Redis Server for testing. The server will allow you to connect your favorite client library to the Redis Server and run parallel integration tests isolated from each other.",
@@ -13,3 +13,3 @@ "bin": "bin/index.js",
   "engines": {
-    "node": ">=16"
+    "node": ">=18"
   },
@@ -47,3 +47,2 @@ "files": [
     "@types/semver": "^7.5.0",
-    "@types/tar": "^6.1.5",
     "@types/tmp": "^0.2.3",
@@ -86,3 +85,3 @@ "@types/uuid": "^8.3.4",
     "semver": "^7.5.3",
-    "tar": "^6.1.15",
+    "tar": "^7.5.4",
     "tmp": "^0.2.1",
@@ -89,0 +88,0 @@ "uuid": "^8.3.2"

New alerts

Network access

Supply chain risk

This module accesses the network.

Found 3 instances in 1 package

Shell access

Supply chain risk

This module accesses the system shell. Accessing the system shell increases the risk of executing arbitrary code.

Found 1 instance in 1 package

Dynamic require

Supply chain risk

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 11 instances in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 2 instances in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

URL strings

Supply chain risk

Package contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.

Found 1 instance in 1 package

Fixed alerts

Network access

Supply chain risk

This module accesses the network.

Found 3 instances in 1 package

Shell access

Supply chain risk

This module accesses the system shell. Accessing the system shell increases the risk of executing arbitrary code.

Found 1 instance in 1 package

Dynamic require

Supply chain risk

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 11 instances in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 2 instances in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

URL strings

Supply chain risk

Package contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

126541

1.08%

Dev dependency count

33

-2.94%

Lines of code

1825

1.84%

Dependency changes

• + Added

  @isaacs/fs-minipass@4.0.1
  (transitive)

• + Added

  chownr@3.0.0
  (transitive)

• + Added

  minizlib@3.1.0
  (transitive)

• + Added

  tar@7.5.9
  (transitive)

• + Added

  yallist@5.0.0
  (transitive)

• - Removed

  chownr@2.0.0
  (transitive)

• - Removed

  fs-minipass@2.1.0
  (transitive)

• - Removed

  minipass@3.3.65.0.0
  (transitive)

• - Removed

  minizlib@2.1.2
  (transitive)

• - Removed

  mkdirp@1.0.4
  (transitive)

• - Removed

  tar@6.2.1
  (transitive)

• - Removed

  yallist@4.0.0
  (transitive)

• Updated

  tar@^7.5.4