tar - npm Package Compare versions

Comparing version 7.5.3 to 7.5.4

dist/commonjs/normalize-unicode.js

@@ -14,3 +14,7 @@ "use strict";
     if (!cache.has(s)) {
-        normalizeCache[s] = s.normalize('NFD');
+        // shake out identical accents and ligatures
+        normalizeCache[s] = s
+            .normalize('NFD')
+            .toLocaleLowerCase('en')
+            .toLocaleUpperCase('en');
     }
@@ -17,0 +21,0 @@ else {

dist/commonjs/path-reservations.js

@@ -47,3 +47,3 @@ "use strict";
                     // don't need normPath, because we skip this entirely for windows
-                    return (0, strip_trailing_slashes_js_1.stripTrailingSlashes)((0, node_path_1.join)((0, normalize_unicode_js_1.normalizeUnicode)(p))).toLowerCase();
+                    return (0, strip_trailing_slashes_js_1.stripTrailingSlashes)((0, node_path_1.join)((0, normalize_unicode_js_1.normalizeUnicode)(p)));
                 });
@@ -50,0 +50,0 @@ const dirs = new Set(paths.map(path => getDirs(path)).reduce((a, b) => a.concat(b)));

dist/esm/normalize-unicode.js

@@ -11,3 +11,7 @@ // warning: extremely hot code path.
     if (!cache.has(s)) {
-        normalizeCache[s] = s.normalize('NFD');
+        // shake out identical accents and ligatures
+        normalizeCache[s] = s
+            .normalize('NFD')
+            .toLocaleLowerCase('en')
+            .toLocaleUpperCase('en');
     }
@@ -14,0 +18,0 @@ else {

dist/esm/path-reservations.js

@@ -44,3 +44,3 @@ // A path exclusive reservation system
                     // don't need normPath, because we skip this entirely for windows
-                    return stripTrailingSlashes(join(normalizeUnicode(p))).toLowerCase();
+                    return stripTrailingSlashes(join(normalizeUnicode(p)));
                 });
@@ -47,0 +47,0 @@ const dirs = new Set(paths.map(path => getDirs(path)).reduce((a, b) => a.concat(b)));

package.json

@@ -5,3 +5,3 @@ {
   "description": "tar for node",
-  "version": "7.5.3",
+  "version": "7.5.4",
   "repository": {
@@ -8,0 +8,0 @@ "type": "git",

New alerts

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 4 instances in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

Fixed alerts

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 4 instances in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

1247661

0.04%

Lines of code

11848

0.07%

No dependency changes