@appliedblockchain/changelog - npm Package Compare versions

Comparing version 1.0.2 to 1.1.0

bin/changelog.js

@@ -5,6 +5,7 @@ #! /usr/bin/env node
 
+const isSemver = _1 => /^v?\d+\.\d+\.\d+$/.test(_1)
 const puts = console.log
 const sh = cmd => execSync(cmd, { encoding: 'utf8' }).trim()
 const linesOf = cmd => sh(cmd).split('\n').map(_1 => _1.trim()).filter(Boolean)
-const tagsOf = () => linesOf('git tag --sort=-creatordate')
+const tagsOf = () => linesOf('git tag --sort=-creatordate').filter(isSemver)
 const dateOf = tag => sh(`git log -1 --format=%ai ${tag} | awk '{ print $1 }'`)
@@ -20,3 +21,3 @@ const logsOf = (tag1, tag2) => linesOf(`git log ${tag1}...${tag2} --pretty=format:'%s'`).filter(Boolean)
   }
-  if (/^\d+\.\d+\.\d+$/.test(log)) {
+  if (isSemver(log)) {
     return false
@@ -23,0 +24,0 @@ }

package.json

 {
   "name": "@appliedblockchain/changelog",
-  "version": "1.0.2",
+  "version": "1.1.0",
   "description": "npx @appliedblockchain/changelog > Changelog.md",
   "main": "changelog",
-  "bin": {
-    "changelog": "bin/changelog.js"
+  "bin": "bin/changelog.js",
+  "scripts": {
+    "changelog": "npx @appliedblockchain/changelog > Changelog.md"
   },
-  "scripts": {},
   "keywords": [],
   "author": "",
+  "repository": "appliedblockchain/changelog",
   "license": "UNLICENSED"
 }

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

New author

Supply chain risk

A new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

No README

Quality

Package does not have a README. This may indicate a failed publish or a low quality package.

Found 1 instance in 1 package

No repository

Supply chain risk

Package does not have a linked source code repository. Without this field, a package will have no reference to the location of the source code use to generate the package.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

2432

increased by45.98%

Number of package files

4

increased by100%

Lines of code

43

increased by2.38%

Number of medium quality alerts

1

decreased by-50%

Number of lines in readme file

14

increased byInfinity%

Worsened metrics

Number of medium supply chain risk alerts

2

increased by100%

No dependency changes