winston - npm Package Compare versions

Comparing version 3.3.1 to 3.3.2

CHANGELOG.md

 # CHANGELOG
 
+## v3.3.2 / 2020-06-22
+
+- [#1814] Use a fork of `diagnostics` published to NPM to avoid git dependency.
+
 ## v3.3.1 / 2020-06-21
@@ -4,0 +8,0 @@

dist/winston/create-logger.js

@@ -34,3 +34,3 @@ /**
 
-var debug = require('diagnostics')('winston:create-logger');
+var debug = require('@dabh/diagnostics')('winston:create-logger');
 
@@ -37,0 +37,0 @@ function isLevelEnabledFunctionName(level) {

dist/winston/exception-handler.js

@@ -19,3 +19,3 @@ /**
 
-var debug = require('diagnostics')('winston:exception');
+var debug = require('@dabh/diagnostics')('winston:exception');
 
@@ -22,0 +22,0 @@ var once = require('one-time');

dist/winston/rejection-handler.js

@@ -19,3 +19,3 @@ /**
 
-var debug = require('diagnostics')('winston:rejection');
+var debug = require('@dabh/diagnostics')('winston:rejection');
 
@@ -22,0 +22,0 @@ var once = require('one-time');

dist/winston/transports/file.js

@@ -50,3 +50,3 @@ /* eslint-disable complexity,max-statements */
 
-var debug = require('diagnostics')('winston:file');
+var debug = require('@dabh/diagnostics')('winston:file');
 
@@ -53,0 +53,0 @@ var os = require('os');

lib/winston/create-logger.js

@@ -13,3 +13,3 @@ /**
 const Logger = require('./logger');
-const debug = require('diagnostics')('winston:create-logger');
+const debug = require('@dabh/diagnostics')('winston:create-logger');
 
@@ -16,0 +16,0 @@ function isLevelEnabledFunctionName(level) {

lib/winston/exception-handler.js

@@ -12,3 +12,3 @@ /**
 const asyncForEach = require('async/forEach');
-const debug = require('diagnostics')('winston:exception');
+const debug = require('@dabh/diagnostics')('winston:exception');
 const once = require('one-time');
@@ -15,0 +15,0 @@ const stackTrace = require('stack-trace');

lib/winston/rejection-handler.js

@@ -12,3 +12,3 @@ /**
 const asyncForEach = require('async/forEach');
-const debug = require('diagnostics')('winston:rejection');
+const debug = require('@dabh/diagnostics')('winston:rejection');
 const once = require('one-time');
@@ -15,0 +15,0 @@ const stackTrace = require('stack-trace');

lib/winston/transports/file.js

@@ -18,3 +18,3 @@ /* eslint-disable complexity,max-statements */
 const TransportStream = require('winston-transport');
-const debug = require('diagnostics')('winston:file');
+const debug = require('@dabh/diagnostics')('winston:file');
 const os = require('os');
@@ -21,0 +21,0 @@ const tailFile = require('../tail-file');

package.json

 {
   "name": "winston",
   "description": "A logger for just about everything.",
-  "version": "3.3.1",
+  "version": "3.3.2",
   "author": "Charlie Robbins <[e-mail]>",
@@ -30,3 +30,3 @@ "maintainers": [
     "async": "^3.1.0",
-    "diagnostics": "DABH/diagnostics#master",
+    "@dabh/diagnostics": "^2.0.2",
     "is-stream": "^2.0.0",
@@ -33,0 +33,0 @@ "logform": "^2.2.0",

Fixed alerts

GitHub dependency

Supply chain risk

Contains a dependency which resolves to a GitHub URL. Dependencies fetched from GitHub specifiers are not immutable can be used to inject untrusted code or reduce the likelihood of a reproducible install.

Found 1 instance in 1 package

Manifest confusion

Supply chain risk

This package has inconsistent metadata. This could be malicious or caused by an error when publishing the package.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

285988

increased by0.05%

Number of high supply chain risk alerts

0

decreased by-100%

Number of medium supply chain risk alerts

4

decreased by-20%

Dependency changes

• + Added@dabh/diagnostics@^2.0.2

• + Added@dabh/diagnostics@2.0.3(transitive)

• + Addedcolor@3.2.1(transitive)

• + Addedcolor-convert@1.9.3(transitive)

• + Addedcolor-name@1.1.3(transitive)

• + Addedcolor-string@1.9.1(transitive)

• + Addedcolorspace@1.1.4(transitive)

• + Addedenabled@2.0.0(transitive)

• + Addedis-arrayish@0.3.2(transitive)

• + Addedkuler@2.0.0(transitive)

• + Addedsimple-swizzle@0.2.2(transitive)

• + Addedtext-hex@1.0.0(transitive)

• - Removeddiagnostics@DABH/diagnostics#master