semver - npm Package Compare versions

Comparing version 7.7.2 to 7.7.3

classes/range.js

@@ -258,2 +258,3 @@ 'use strict'
 const parseComparator = (comp, options) => {
+  comp = comp.replace(re[t.BUILD], '')
   debug('comp', comp, options)
@@ -260,0 +261,0 @@ comp = replaceCarets(comp, options)

classes/semver.js

@@ -114,7 +114,21 @@ 'use strict'
 
-    return (
-      compareIdentifiers(this.major, other.major) ||
-      compareIdentifiers(this.minor, other.minor) ||
-      compareIdentifiers(this.patch, other.patch)
-    )
+    if (this.major < other.major) {
+      return -1
+    }
+    if (this.major > other.major) {
+      return 1
+    }
+    if (this.minor < other.minor) {
+      return -1
+    }
+    if (this.minor > other.minor) {
+      return 1
+    }
+    if (this.patch < other.patch) {
+      return -1
+    }
+    if (this.patch > other.patch) {
+      return 1
+    }
+    return 0
   }
@@ -121,0 +135,0 @@

internal/identifiers.js

@@ -5,2 +5,6 @@ 'use strict'
 const compareIdentifiers = (a, b) => {
+  if (typeof a === 'number' && typeof b === 'number') {
+    return a === b ? 0 : a < b ? -1 : 1
+  }
+
   const anum = numeric.test(a)
@@ -7,0 +11,0 @@ const bnum = numeric.test(b)

package.json

 {
   "name": "semver",
-  "version": "7.7.2",
+  "version": "7.7.3",
   "description": "The semantic version parser used by npm.",
@@ -18,3 +18,3 @@ "main": "index.js",
     "@npmcli/eslint-config": "^5.0.0",
-    "@npmcli/template-oss": "4.24.3",
+    "@npmcli/template-oss": "4.25.1",
     "benchmark": "^2.1.4",
@@ -56,3 +56,3 @@ "tap": "^16.0.0"
     "//@npmcli/template-oss": "This file is partially managed by @npmcli/template-oss. Edits may be overwritten.",
-    "version": "4.24.3",
+    "version": "4.25.1",
     "engines": ">=10",
@@ -59,0 +59,0 @@ "distPaths": [

New alerts

URL strings

Supply chain risk

Package contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.

Found 1 instance in 1 package

Fixed alerts

URL strings

Supply chain risk

Package contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

97743

0.33%

Lines of code

2213

0.82%

No dependency changes