@atjson/conventional-changelog-emoji - npm Package Compare versions

Comparing version 0.8.5 to 0.8.6

CHANGELOG.md

@@ -6,4 +6,18 @@ # Change Log
 
+## [0.8.6](https://github.com/CondeNast-Copilot/atjson/compare/@atjson/conventional-changelog-emoji@0.8.5...@atjson/conventional-changelog-emoji@0.8.6) (2018-09-04)
+
+
+### 🐛 Fixes
+
+* 🐛🔒 fix vulnerability with with git-dummy-commit by using shelljs directly ([#76](https://github.com/CondeNast-Copilot/atjson/issues/76))
+
+
+
+# Change Log
+
+All notable changes to this project will be documented in this file.
+See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.
+
 ## 0.8.5 (2018-08-02)
 
 **Note:** Version bump only for package @atjson/conventional-changelog-emoji

package.json

 {
   "name": "@atjson/conventional-changelog-emoji",
-  "version": "0.8.5",
+  "version": "0.8.6",
   "description": "Conventional commits for AtJSON",
   "main": "src/index.js",
   "scripts": {
-    "test": "mocha --timeout 30000"
+    "test": "../../../node_modules/.bin/jest packages/@atjson/$(basename $PWD) --config=../../../package.json"
   },
@@ -14,9 +14,5 @@ "license": "Apache-2.0",
   "devDependencies": {
-    "better-than-before": "^1.0.0",
-    "chai": "^4.1.2",
+    "@types/q": "^1.5.0",
     "conventional-changelog-core": "^3.0.0",
-    "git-dummy-commit": "^1.2.0",
-    "mocha": "^5.2.0",
-    "shelljs": "^0.8.0",
-    "through2": "^2.0.0"
+    "shelljs": "^0.8.2"
   },
@@ -26,3 +22,3 @@ "dependencies": {
   },
-  "gitHead": "e48b2eb7554436bdb56ae9c713629ac21c581eae"
+  "gitHead": "67d2ccd60c5f64157e7745db958ea0eaf954098c"
 }

New alerts

New author

Supply chain risk

A new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

27961

increased by4.36%

Dev dependency count

3

decreased by-57.14%

Worsened metrics

Number of low supply chain risk alerts

5

increased by25%

Number of medium supply chain risk alerts

1

increased byInfinity%

No dependency changes