transmission-native - npm Package Compare versions

Comparing version 0.1.1 to 0.2.0

package.json

 {
   "name": "transmission-native",
-  "version": "0.1.1",
+  "version": "0.2.0",
   "description": "transmission-native",
@@ -13,3 +13,3 @@ "author": "Geoffrey Bonneville <[e-mail]>",
     "fetch-deps": "git submodule update --recursive --init",
-    "build-transmission": "./deps/build-transmission.sh"
+    "build-transmission": "node ./scripts/build-transmission.js"
   },
@@ -16,0 +16,0 @@ "dependencies": {

README.md

@@ -68,6 +68,18 @@ # transmission-native
 
-You'll need to install required build tools and libraries for your platform in order to compile libtransmission.
+You'll need to install required build tools and libraries for your platform in order to compile libtransmission:
 
+## Fedora / RHEL
 ```sh
+sudo dnf install cmake gcc-c++ libcurl-devel openssl-devel
+```
+
+## Windows
+```sh
+vcpkg install curl --triplet=x64-windows-static
+vcpkg install openssl --triplet=x64-windows
+```
+
+```sh
 npm run fetch-deps
+# For Windows you need to set VCPKG_INSTALLATION_ROOT env variable
 npm run build-transmission
@@ -74,0 +86,0 @@ npm install

test.js

@@ -26,9 +26,11 @@ const os = require('os')
 
-  it('request should succeed with callback', (done) => {
-    const req = { method: 'session-get' }
+  it('request should succeed with callback', () => {
+    return new Promise((resolve, reject) => {
+      const req = { method: 'session-get' }
 
-    tr.request(req, (err, json) => {
-      if (err) done(err)
-      assert.equal(json.result, 'success')
-      done()
+      tr.request(req, (err, json) => {
+        if (err) return reject(err)
+        assert.equal(json.result, 'success')
+        resolve()
+      })
     })
@@ -35,0 +37,0 @@ })

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Native code

Supply chain risk

Contains native code (e.g., compiled binaries or shared libraries). Including native code can obscure malicious behavior.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

5571499

increased by74.32%

Number of package files

13

increased by8.33%

Lines of code

165

increased by85.39%

Number of lines in readme file

92

increased by15%

Worsened metrics

Number of low supply chain risk alerts

3

increased by50%

Number of medium supply chain risk alerts

3

increased by50%

No dependency changes