wileys - npm Package Compare versions

Comparing version 0.4.2 to 0.4.3

lib/Socket/messages-send.js

@@ -776,3 +776,2 @@ "use strict";
                     });
-                    await new Promise(resolve => setTimeout(resolve, 800));
                 }
@@ -779,0 +778,0 @@ return albumMsg;

lib/Socket/socket.js

@@ -92,10 +92,2 @@ "use strict";
         }
-        // gently back off when encountering rate limits (429)
-        if (message.includes('429') || message.includes('rate limit')) {
-            const wait = Math.min(30000, (config.backoffDelayMs || 5000));
-            logger.info({ wait }, 'backing off due to rate limit');
-            setTimeout(() => {
-                // intentionally empty; wait to delay further sends
-            }, wait);
-        }
     };
@@ -144,3 +136,3 @@ /** await the next incoming message */
                 ws.on('close', onErr); // if the socket closes, you'll never receive the message
-                ws.off('error', onErr);
+                ws.on('error', onErr);
             });
@@ -161,7 +153,9 @@ return result;
         const msgId = node.attrs.id;
-        const [result] = await Promise.all([
-            waitForMessage(msgId, timeoutMs),
+        const result = await (0, Utils_1.promiseTimeout)(timeoutMs, async (resolve, reject) => {
+            const wait = waitForMessage(msgId, timeoutMs).catch(reject);
             sendNode(node)
-        ]);
-        if ('tag' in result) {
+                .then(async () => resolve(await wait))
+                .catch(reject);
+        });
+        if (result && 'tag' in result) {
             (0, WABinary_1.assertNodeErrorFree)(result);
@@ -168,0 +162,0 @@ }

package.json

 {
   "name": "wileys",
-  "version": "0.4.2",
+  "version": "0.4.3",
   "description": "WhatsApp Web API Library",
@@ -5,0 +5,0 @@ "keywords": [

New alerts

Shell access

Supply chain risk

This module accesses the system shell. Accessing the system shell increases the risk of executing arbitrary code.

Found 1 instance in 1 package

Uses eval

Supply chain risk

Package uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Found 1 instance in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 2 instances in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

URL strings

Supply chain risk

Package contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.

Found 1 instance in 1 package

Fixed alerts

AI-detected potential malware

Supply chain risk

AI has identified this package as malware. This is a strong signal that the package may be malicious.

Found 1 instance in 1 package

Shell access

Supply chain risk

This module accesses the system shell. Accessing the system shell increases the risk of executing arbitrary code.

Found 1 instance in 1 package

Uses eval

Supply chain risk

Package uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Found 1 instance in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 2 instances in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

URL strings

Supply chain risk

Package contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.

Found 1 instance in 1 package

Improved metrics

Number of high supply chain risk alerts

2

-33.33%

Worsened metrics

Total package byte prevSize

9800569

0

Lines of code

31416

-0.02%

No dependency changes