@auto-it/core - npm Package Compare versions

Comparing version 7.0.3-canary.5822.1 to 7.0.3

dist/utils/load-plugins.js

@@ -34,5 +34,7 @@ "use strict";
     var plugin = try_require_1.default(pluginPath);
+    // Try importing plugin as a path in CWD
     if (!plugin) {
         plugin = try_require_1.default(path.join(process.cwd(), pluginPath));
     }
+    // Try importing official plugin
     if (!plugin) {
@@ -39,0 +41,0 @@ plugin = try_require_1.default(path.join('@auto-it', pluginPath));

dist/utils/try-require.js

@@ -9,6 +9,18 @@ "use strict";
     try {
+        // Require from CWD
         return import_cwd_1.default(tryPath);
     }
     catch (error) {
-        return;
+        // if we try to actually require npm we will import something that is the actual npm API
+        // not the plugin that we want
+        if (tryPath === 'npm') {
+            return;
+        }
+        try {
+            // Require from __dirname. Needed for npx and global installs
+            return require(tryPath);
+        }
+        catch (error) {
+            return;
+        }
     }
@@ -15,0 +27,0 @@ }

package.json

 {
   "name": "@auto-it/core",
-  "version": "7.0.3-canary.5822.1+825a598",
+  "version": "7.0.3",
   "description": "Node API for using auto.",
@@ -79,3 +79,3 @@ "main": "dist/auto.js",
   },
-  "gitHead": "825a598a338616e74dc76bb9f1570cef8c33c9f0"
+  "gitHead": "3229bfdf2e6528e53820f21c2b8bdf93ab95381e"
 }

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Dynamic require

Supply chain risk

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Manifest confusion

Supply chain risk

This package has inconsistent metadata. This could be malicious or caused by an error when publishing the package.

Found 1 instance in 1 package

No v1

Quality

Package is not semver >=1. This means it is not stable and does not support ^ ranges.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

665338

increased by0.8%

Number of package files

93

increased by3.33%

Lines of code

9808

increased by0.85%

Number of low quality alerts

1

decreased by-50%

Number of medium supply chain risk alerts

1

decreased by-50%

Worsened metrics

Number of low supply chain risk alerts

11

increased by10%

No dependency changes