socket.io-stream - npm Package Compare versions

Comparing version 0.5.0 to 0.5.1

lib/iostream.js

@@ -76,2 +76,5 @@ var util = require('util')
 
+  // We can not read from the socket if it's destroyed obviously ...
+  if(this.destroyed) return;
+
   if (this.pushBuffer.length) {
@@ -119,2 +122,4 @@ // flush buffer and end if it exists.
   function write() {
+    // We can not write to the socket if it's destroyed obviously ...
+    if(self.destroyed) return;
     self._writable = false;
@@ -121,0 +126,0 @@ self.socket._write(self.id, chunk, encoding, callback);

package.json

 {
   "name": "socket.io-stream",
-  "version": "0.5.0",
+  "version": "0.5.1",
   "description": "stream for socket.io",
@@ -5,0 +5,0 @@ "author": "Naoyuki Kanezawa <[e-mail]>",

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Uses eval

Supply chain risk

Package uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Improved metrics

Lines of code

1026

increased by0.39%

Worsened metrics

Total package byte prevSize

156493

decreased by-2.27%

Number of low supply chain risk alerts

7

increased by40%

Number of medium supply chain risk alerts

1

increased byInfinity%

No dependency changes