winston - npm Package Compare versions

Comparing version 3.0.0 to 3.0.1

CHANGELOG.md

 # CHANGELOG
 
+## v3.0.1 / 2018-09-04
+### NPMIGNORE IS HARD EDITION
+
+- (@DABH) npm ignore scratch folder from CI.
+
 ## v3.0.0 / 2018-06-12
@@ -4,0 +9,0 @@ ### GET IN THE CHOPPA EDITION

package.json

 {
   "name": "winston",
   "description": "A logger for just about everything.",
-  "version": "3.0.0",
+  "version": "3.0.1",
   "author": "Charlie Robbins <[e-mail]>",
@@ -6,0 +6,0 @@ "maintainers": [

Fixed alerts

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 1 instance in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

Improved metrics

Number of low supply chain risk alerts

9

decreased by-35.71%

Worsened metrics

Total package byte prevSize

166181

decreased by-72.85%

Number of package files

33

decreased by-52.86%

Lines of code

3390

decreased by-16.23%

No dependency changes