tar - npm Package Compare versions

Comparing version 6.1.12 to 6.1.13

package.json

@@ -5,3 +5,3 @@ {
   "description": "tar for node",
-  "version": "6.1.12",
+  "version": "6.1.13",
   "repository": {
@@ -24,3 +24,3 @@ "type": "git",
     "fs-minipass": "^2.0.0",
-    "minipass": "^3.0.0",
+    "minipass": "^4.0.0",
     "minizlib": "^2.1.1",
@@ -32,6 +32,6 @@ "mkdirp": "^1.0.3",
     "@npmcli/eslint-config": "^4.0.0",
-    "@npmcli/template-oss": "4.8.0",
+    "@npmcli/template-oss": "4.10.0",
     "chmodr": "^1.2.0",
     "end-of-stream": "^1.4.3",
-    "events-to-array": "^1.1.2",
+    "events-to-array": "^2.0.3",
     "mutate-fs": "^2.1.1",
@@ -61,3 +61,3 @@ "nock": "^13.2.9",
     "//@npmcli/template-oss": "This file is partially managed by @npmcli/template-oss. Edits may be overwritten.",
-    "version": "4.8.0",
+    "version": "4.10.0",
     "content": "scripts/template-oss",
@@ -64,0 +64,0 @@ "engines": ">=10",

Fixed alerts

New author

Supply chain risk

A new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

163641

Number of medium supply chain risk alerts

0

decreased by-100%

Dependency changes

• + Addedminipass@4.2.8(transitive)

• Updatedminipass@^4.0.0