@adobe/aio-cli-plugin-runtime - npm Package Compare versions

Comparing version 5.0.1-0 to 5.0.1-next.0

package.json

 {
   "name": "@adobe/aio-cli-plugin-runtime",
   "description": "Adobe I/O Runtime commands for the Adobe I/O CLI",
-  "version": "5.0.1-0",
+  "version": "5.0.1-next.0",
   "author": "Adobe Inc.",
@@ -12,2 +12,3 @@ "bugs": "https://github.com/adobe/aio-cli-plugin-runtime/issues",
     "@adobe/aio-lib-core-config": "^2.0.0",
+    "@adobe/aio-lib-core-networking": "github:adobe/aio-lib-core-networking#master",
     "@adobe/aio-lib-runtime": "github:adobe/aio-lib-runtime#proxy-support",
@@ -26,3 +27,2 @@ "@oclif/command": "^1.5.6",
     "lodash.clonedeep": "^4.5.0",
-    "node-fetch": "^2.6.0",
     "openwhisk": "^3.21.2",
@@ -29,0 +29,0 @@ "openwhisk-fqn": "^0.0.2",

src/commands/runtime/property/get.js

@@ -15,3 +15,3 @@ /*
 const { cli } = require('cli-ux')
-const fetch = require('node-fetch')
+const { createFetch } = require('@adobe/aio-lib-core-networking')
 const { PropertyKey, PropertyDefault, propertiesFile, PropertyEnv } = require('../../../properties')
@@ -79,2 +79,3 @@ const debug = require('debug')('aio-cli-plugin-runtime/property')
         debug(`Getting data from url ${uri} ...\n`)
+        const fetch = createFetch()
         const response = await fetch(uri)
@@ -81,0 +82,0 @@ result = await response.json()

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

GitHub dependency

Supply chain risk

Contains a dependency which resolves to a GitHub URL. Dependencies fetched from GitHub specifiers are not immutable can be used to inject untrusted code or reduce the likelihood of a reproducible install.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

338126

increased by0.22%

Lines of code

4310

increased by0.02%

Worsened metrics

Number of high supply chain risk alerts

2

increased by100%

Dependency changes

• + Added@adobe/aio-lib-core-networking@github:adobe/aio-lib-core-networking#master

• - Removednode-fetch@^2.6.0

• - Removednode-fetch@2.7.0(transitive)

• - Removedtr46@0.0.3(transitive)

• - Removedwebidl-conversions@3.0.1(transitive)

• - Removedwhatwg-url@5.0.0(transitive)