sqlite3 - npm Package Compare versions

Comparing version 4.0.4 to 4.0.6

CHANGELOG.md

 # Changelog
 
+
+## 4.0.5
+- **SECURITY:** Upgrade SQLite to 3.26.0 [#1088](https://github.com/mapbox/node-sqlite3/pull/1088)
+- add constants for file open (shared databases) [#1078](https://github.com/mapbox/node-sqlite3/pull/1078)
+- Allow specifying the python to use [#1089](https://github.com/mapbox/node-sqlite3/pull/1089)
+
 ## 4.0.4
@@ -4,0 +10,0 @@ - Add NodeJS 11 support [#1072](https://github.com/mapbox/node-sqlite3/pull/1072)

package.json

 {
   "name": "sqlite3",
   "description": "Asynchronous, non-blocking SQLite3 bindings",
-  "version": "4.0.4",
+  "version": "4.0.6",
   "homepage": "http://github.com/mapbox/node-sqlite3",
@@ -41,3 +41,3 @@ "author": {
     "nan": "~2.10.0",
-    "node-pre-gyp": "^0.10.3",
+    "node-pre-gyp": "^0.11.0",
     "request": "^2.87.0"
@@ -54,3 +54,4 @@ },
     "pretest": "node test/support/createdb.js",
-    "test": "mocha -R spec --timeout 480000"
+    "test": "mocha -R spec --timeout 480000",
+    "pack": "node-pre-gyp package"
   },
@@ -57,0 +58,0 @@ "license": "BSD-3-Clause",

README.md

@@ -55,3 +55,3 @@ Asynchronous, non-blocking [SQLite3](http://sqlite.org/) bindings for [Node.js](http://nodejs.org/).
  - Written in modern C++ and tested for memory leaks
- - Bundles Sqlite3 3.24.0 as a fallback if the installing system doesn't include SQLite
+ - Bundles Sqlite3 3.26.0 as a fallback if the installing system doesn't include SQLite
 
@@ -94,2 +94,11 @@ # API
 
+By default the node-gyp install will use `python` as part of the installation. A
+different python executable can be specified on the command line.
+
+    npm install --build-from-source --python=/usr/bin/python2
+
+This uses the npm_config_python config, so values in .npmrc will be honoured:
+
+    python=/usr/bin/python2
+
 ## Building for node-webkit
@@ -96,0 +105,0 @@

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

New author

Supply chain risk

A new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

2890567

increased by2.9%

Number of lines in readme file

217

increased by4.33%

Worsened metrics

Number of medium supply chain risk alerts

2

increased by100%

Dependency changes

• + Addednode-pre-gyp@0.11.0(transitive)

• - Removednode-pre-gyp@0.10.3(transitive)

• Updatednode-pre-gyp@^0.11.0