sentry-node - npm Package Compare versions

Comparing version 2.2.1 to 2.3.2

index.js

@@ -1,2 +0,1 @@
-var path = __dirname + '/' + (process.env.TEST_UNDERSTREAM_COV ? 'lib-js-cov' : 'lib-js') + '/sentry';
-module.exports = require(path);
+module.exports = require("./lib-js/sentry");

lib-js/sentry.js

 // Generated by CoffeeScript 1.6.3
-var Sentry, events, nodeurl, os, parseDSN, quest, scrub, util, with_timeout, _, _handle_http_load_errors,
+var Sentry, events, nodeurl, os, parseDSN, request, scrub, util, with_timeout, _, _handle_http_load_errors,
   __slice = [].slice,
@@ -14,3 +14,3 @@ __bind = function(fn, me){ return function(){ return fn.apply(me, arguments); }; },
 
-quest = require('quest');
+request = require('request');
 
@@ -161,3 +161,3 @@ util = require('util');
     };
-    return quest(options, function(err, res, body) {
+    return request(options, function(err, res, body) {
       var _ref;
@@ -164,0 +164,0 @@ _this.emit("done");

package.json

 {
   "name": "sentry-node",
-  "version": "2.2.1",
+  "version": "2.3.2",
   "description": "simple Node wrapper around Sentry API",
@@ -14,3 +14,2 @@ "engines": {
     "test": "make -Br test",
-    "test-cov": "make -Br test-cov",
     "prepublish": "make build"
@@ -31,14 +30,14 @@ },
   "dependencies": {
-    "debug": "~0.7.4",
+    "debug": "~2.6.9",
     "loofah": "0.0.6",
-    "quest": "~0.2.4",
+    "request": "^2.88.0",
     "underscore": "~1.5.2"
   },
   "devDependencies": {
+    "bluebird": "^3.4.0",
     "coffee-script": "~1.6.3",
-    "mocha": "~1.14.0",
+    "mocha": "^5.2.0",
     "nock": "~0.23.0",
-    "sinon": "^1.10.3",
-    "bluebird": "^3.4.0"
+    "sinon": "^1.10.3"
   }
 }

New alerts

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 1 instance in 1 package

Fixed alerts

Dynamic require

Supply chain risk

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 2 instances in 1 package

Improved metrics

Number of low supply chain risk alerts

2

decreased by-33.33%

Worsened metrics

Total package byte prevSize

49050

decreased by-0.15%

Dependency changes

• + Addedrequest@^2.88.0

• + Addedajv@6.12.6(transitive)

• + Addedasn1@0.2.6(transitive)

• + Addedassert-plus@1.0.0(transitive)

• + Addedasynckit@0.4.0(transitive)

• + Addedaws-sign2@0.7.0(transitive)

• + Addedaws4@1.12.0(transitive)

• + Addedbcrypt-pbkdf@1.0.2(transitive)

• + Addedcaseless@0.12.0(transitive)

• + Addedcombined-stream@1.0.8(transitive)

• + Addedcore-util-is@1.0.2(transitive)

• + Addeddashdash@1.14.1(transitive)

• + Addeddebug@2.6.9(transitive)

• + Addeddelayed-stream@1.0.0(transitive)

• + Addedecc-jsbn@0.1.2(transitive)

• + Addedextend@3.0.2(transitive)

• + Addedextsprintf@1.3.0(transitive)

• + Addedfast-deep-equal@3.1.3(transitive)

• + Addedfast-json-stable-stringify@2.1.0(transitive)

• + Addedforever-agent@0.6.1(transitive)

• + Addedform-data@2.3.3(transitive)

• + Addedgetpass@0.1.7(transitive)

• + Addedhar-schema@2.0.0(transitive)

• + Addedhar-validator@5.1.5(transitive)

• + Addedhttp-signature@1.2.0(transitive)

• + Addedis-typedarray@1.0.0(transitive)

• + Addedisstream@0.1.2(transitive)

• + Addedjsbn@0.1.1(transitive)

• + Addedjson-schema@0.4.0(transitive)

• + Addedjson-schema-traverse@0.4.1(transitive)

• + Addedjson-stringify-safe@5.0.1(transitive)

• + Addedjsprim@1.4.2(transitive)

• + Addedmime-db@1.52.0(transitive)

• + Addedmime-types@2.1.35(transitive)

• + Addedms@2.0.0(transitive)

• + Addedoauth-sign@0.9.0(transitive)

• + Addedperformance-now@2.1.0(transitive)

• + Addedpsl@1.9.0(transitive)

• + Addedpunycode@2.3.1(transitive)

• + Addedqs@6.5.3(transitive)

• + Addedrequest@2.88.2(transitive)

• + Addedsafe-buffer@5.2.1(transitive)

• + Addedsafer-buffer@2.1.2(transitive)

• + Addedsshpk@1.18.0(transitive)

• + Addedtough-cookie@2.5.0(transitive)

• + Addedtunnel-agent@0.6.0(transitive)

• + Addedtweetnacl@0.14.5(transitive)

• + Addeduri-js@4.4.1(transitive)

• + Addeduuid@3.4.0(transitive)

• + Addedverror@1.10.0(transitive)

• - Removedquest@~0.2.4

• - Removedasync@0.2.10(transitive)

• - Removedcoffee-script@1.6.3(transitive)

• - Removedcookiejar@1.3.2(transitive)

• - Removeddebug@0.7.4(transitive)

• - Removedqs@0.5.6(transitive)

• - Removedquest@0.2.8(transitive)

• - Removedunderscore@1.4.4(transitive)

• - Removedunderscore.deep@0.0.5(transitive)

• Updateddebug@~2.6.9