tar.gz - npm Package Compare versions

Comparing version 1.0.2 to 1.0.3

index.js

@@ -59,5 +59,10 @@ var tar = require('tar');
 
-  this._bubble(stream1, stream2);
+  this._bubble(stream2, stream1);
   stream1.pipe(stream2);
 
+  // Monkey patch stream1's .on() so stream2 actually handles events
+  stream1.on = function(event, listener) {
+    stream2.on(event, listener);
+  };
+
   return stream1;
@@ -64,0 +69,0 @@ };

package.json

 {
   "name": "tar.gz",
-  "version": "1.0.2",
+  "version": "1.0.3",
   "description": "Pure javascript tarball tools for Node.js",
@@ -5,0 +5,0 @@ "main": "index.js",

New alerts

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 2 instances in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

Fixed alerts

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 2 instances in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

12916

1.18%

Lines of code

158

2.6%

No dependency changes