socket.io-stream - npm Package Compare versions

Comparing version 0.5.1 to 0.5.2

lib/iostream.js

@@ -77,3 +77,3 @@ var util = require('util')
   // We can not read from the socket if it's destroyed obviously ...
-  if(this.destroyed) return;
+  if (this.destroyed) return;
 
@@ -123,3 +123,4 @@ if (this.pushBuffer.length) {
     // We can not write to the socket if it's destroyed obviously ...
-    if(self.destroyed) return;
+    if (self.destroyed) return;
+
     self._writable = false;
@@ -199,3 +200,6 @@ self.socket._write(self.id, chunk, encoding, callback);
   // send 'end' event to remote
-  this.socket._end(this.id);
+  if (this.socket) {
+    this.socket._end(this.id);
+  }
+
   this.writable = false;
@@ -212,4 +216,8 @@ this._writableState.ended = true;
   if (!this.allowHalfOpen) {
-    this.read(0);
     this.push(null);
+
+    // just in case we're waiting for an EOF.
+    if (this.readable && !this._readableState.endEmitted) {
+      this.read(0);
+    }
   }
@@ -228,2 +236,3 @@ };
   this.readable = false;
+  this._readableState.ended = true;
 
@@ -230,0 +239,0 @@ if (!this.writable || this._writableState.finished) {

package.json

 {
   "name": "socket.io-stream",
-  "version": "0.5.1",
+  "version": "0.5.2",
   "description": "stream for socket.io",
@@ -24,6 +24,7 @@ "author": "Naoyuki Kanezawa <[e-mail]>",
   "scripts": {
-    "test": "make test-all"
+    "test": "make test-all",
+    "prepublish": "make test-all build"
   },
   "dependencies": {
-    "readable-stream": "1.0.2",
+    "readable-stream": "1.1.9",
     "debug": "*"
@@ -38,3 +39,3 @@ },
     "checksum": "*",
-    "browserify": "*",
+    "browserify": "2.36.1",
     "uglify-js": "*",
@@ -41,0 +42,0 @@ "phantomjs": "*",

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Uses eval

Supply chain risk

Package uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

167165

increased by6.82%

Lines of code

1032

increased by0.58%

Number of low supply chain risk alerts

6

decreased by-14.29%

Number of medium supply chain risk alerts

0

decreased by-100%

Dependency changes

• + Addedcore-util-is@1.0.3(transitive)

• + Addeddebuglog@0.0.2(transitive)

• + Addedreadable-stream@1.1.9(transitive)

• - Removedreadable-stream@1.0.2(transitive)

• Updatedreadable-stream@1.1.9