serialport - npm Package Compare versions

Comparing version 0.1.1 to 0.1.3

._package.json

@@ -1,4 +0,4 @@
-Mac OS X        	2��ATTR�6��"
�"com.macromates.caret{
+Mac OS X        	2��ATTRQ-���"
�"com.macromates.caret{
     column = 22;
     line = 1;
 }

package.json

 {   "name" : "serialport",
-    "version" : "0.1.1",
+    "version" : "0.1.3",
     "description" : "Welcome your robotic javascript overlords. Better yet, program them!",
@@ -10,3 +10,3 @@ "author": "Chris Williams <[e-mail]>",
     },
-    "scripts": { "install": "node-waf configure build" }
+    "scripts": { "install": "cd serialport_native;node-waf configure build;cp build/default/serialport_native.node ../" }
 }

serialport.js

@@ -48,4 +48,5 @@ "use strict";
     return function () {
-      var buffer = serialport_native.read(file_id, buffer);
-      me.emit('data', buffer);
+      var buffer = new Buffer(255);
+      var bytes_read = serialport_native.read(file_id, buffer);
+      me.emit('data', buffer.slice(0, bytes_read));
     }
@@ -69,5 +70,4 @@ })(this.fd, this);
 SerialPort.prototype.write = function (b) { 
-  // console.log(this.fd);
   if (Buffer.isBuffer(b))
-    serialport_native.write(this.fd, buffer);
+    serialport_native.write(this.fd, b);
   else
@@ -74,0 +74,0 @@ serialport_native.write(this.fd, new Buffer(b));

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Install scripts

Supply chain risk

Install scripts are run when the package is installed. The majority of malware in npm is hidden in install scripts.

Found 1 instance in 1 package

Native code

Supply chain risk

Contains native code (e.g., compiled binaries or shared libraries). Including native code can obscure malicious behavior.

Found 2 instances in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Install scripts

Supply chain risk

Install scripts are run when the package is installed. The majority of malware in npm is hidden in install scripts.

Found 1 instance in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

61691

increased by16.08%

Number of package files

25

increased by47.06%

Number of low supply chain risk alerts

2

decreased by-33.33%

Worsened metrics

Lines of code

90

decreased by-1.1%

Number of medium supply chain risk alerts

3

increased by200%

No dependency changes