smith - npm Package Compare versions

Comparing version 0.1.5 to 0.1.6

package.json

@@ -8,3 +8,6 @@ {
     "description": "Smith is an RPC agent system for Node.JS used in architect and vfs.",
-    "version": "0.1.5",
+    "version": "0.1.6",
+    "scripts": {
+        "test": "./test-all.sh"
+    },
     "licenses" : [{
@@ -11,0 +14,0 @@ "type" : "MIT",

smith.js

@@ -23,7 +23,8 @@ /*
 ( // Module boilerplate to support browser globals, node.js and AMD.
-  (typeof module === "object" && function (m) { module.exports = m(require('events').EventEmitter, require('msgpack-js')); }) ||
-  (typeof define === "function" && function (m) { define("smith", ["EventEmitter", "msgpack"], m); }) ||
-  (function (m) { window.smith = m(window.EventEmitter, window.msgpack); })
-)(function (EventEmitter, msgpack) {
+  (typeof module === "object" && function (m) { module.exports = m(require('events'), require('msgpack-js')); }) ||
+  (typeof define === "function" && function (m) { define("smith", ["events", "msgpack-js"], m); }) ||
+  (function (m) { window.smith = m(window.events, window.msgpack); })
+)(function (events, msgpack) {
 "use strict";
+var EventEmitter = events.EventEmitter;
 
@@ -30,0 +31,0 @@ function inherits(Child, Parent) {

New alerts

Install scripts

Supply chain risk

Install scripts are run when the package is installed. The majority of malware in npm is hidden in install scripts.

Found 1 instance in 1 package

Network access

Supply chain risk

This module accesses the network.

Found 2 instances in 1 package

Shell access

Supply chain risk

This module accesses the system shell. Accessing the system shell increases the risk of executing arbitrary code.

Found 1 instance in 1 package

Dynamic require

Supply chain risk

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

51731

increased by52.1%

Number of package files

21

increased by200%

Lines of code

1004

increased by78.01%

Worsened metrics

Number of lines in readme file

2

decreased by-99.15%

Number of high supply chain risk alerts

2

increased by100%

Number of low supply chain risk alerts

2

increased byInfinity%

Number of medium supply chain risk alerts

3

increased byInfinity%

No dependency changes