sirv - npm Package Compare versions

Comparing version 1.0.0-next.4 to 1.0.0-next.5

index.js

 const fs = require('fs');
-const { join, resolve } = require('path');
+const { join, normalize, resolve } = require('path');
 const list = require('totalist/sync');
@@ -37,3 +37,4 @@ const parser = require('@polka/url');
 	for (; i < arr.length; i++) {
-		if (fs.existsSync(abs = join(dir, name=arr[i]))) {
+		abs = normalize(join(dir, name=arr[i]));
+		if (abs.startsWith(dir) && fs.existsSync(abs)) {
 			stats = fs.statSync(abs);
@@ -40,0 +41,0 @@ if (stats.isDirectory()) continue;

package.json

 {
   "name": "sirv",
-  "version": "1.0.0-next.4",
+  "version": "1.0.0-next.5",
   "description": "The optimized & lightweight middleware for serving requests to static assets",
@@ -16,3 +16,3 @@ "repository": "lukeed/sirv",
   "engines": {
-    "node": ">= 6"
+    "node": ">= 10"
   },
@@ -24,3 +24,3 @@ "dependencies": {
   },
-  "gitHead": "163281a5a4e1fe915932c4dda6eb238714012562"
+  "gitHead": "9953d982af70070a190163e576db12e6df3b26c3"
 }

readme.md

@@ -1,2 +0,2 @@
-# sirv [![Build Status](https://travis-ci.org/lukeed/sirv.svg?branch=master)](https://travis-ci.org/lukeed/sirv)
+# sirv ![CI](https://github.com/lukeed/sirv/workflows/CI/badge.svg?branch=next&event=push)
 
@@ -3,0 +3,0 @@ > The optimized and lightweight middleware for serving requests to static assets

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

11638

increased by0.27%

Lines of code

120

increased by0.84%

No dependency changes