@changesets/cli - npm Package Compare versions

Comparing version 2.11.2 to 2.12.0

CHANGELOG.md

 # @changesets/cli
 
+## 2.12.0
+
+### Minor Changes
+
+- [`c6d38b5`](https://github.com/atlassian/changesets/commit/c6d38b579bdfddc22714c352c3459d04d1745326) [#469](https://github.com/atlassian/changesets/pull/469) Thanks [@camdub](https://github.com/camdub)! - Handle JSON errors for unpublished packages on the github package registry
+
 ## 2.11.2
@@ -4,0 +10,0 @@

dist/cli.cjs.dev.js

@@ -627,3 +627,13 @@ 'use strict';
       env: Object.assign({}, process.env, envOverride)
-    });
+    }); // Github package registry returns empty string when calling npm info
+    // for a non-existant package instead of a E404
+
+    if (result.stdout.toString() === "") {
+      return {
+        error: {
+          code: "E404"
+        }
+      };
+    }
+
     return jsonParse(result.stdout.toString());
@@ -630,0 +640,0 @@ });

dist/cli.cjs.prod.js

@@ -370,5 +370,10 @@ "use strict";
     };
-    return jsonParse((await spawn__default.default("npm", [ "info", pkgName, "--json" ], {
+    let result = await spawn__default.default("npm", [ "info", pkgName, "--json" ], {
       env: Object.assign({}, process.env, envOverride)
-    })).stdout.toString());
+    });
+    return "" === result.stdout.toString() ? {
+      error: {
+        code: "E404"
+      }
+    } : jsonParse(result.stdout.toString());
   }));
@@ -375,0 +380,0 @@ }

dist/cli.esm.js

@@ -604,3 +604,13 @@ import meow from 'meow';
       env: Object.assign({}, process.env, envOverride)
-    });
+    }); // Github package registry returns empty string when calling npm info
+    // for a non-existant package instead of a E404
+
+    if (result.stdout.toString() === "") {
+      return {
+        error: {
+          code: "E404"
+        }
+      };
+    }
+
     return jsonParse(result.stdout.toString());
@@ -607,0 +617,0 @@ });

package.json

 {
   "name": "@changesets/cli",
-  "version": "2.11.2",
+  "version": "2.12.0",
   "description": "Organise your package versioning and publishing to make both contributors and maintainers happy",
@@ -5,0 +5,0 @@ "bin": {

Fixed alerts

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

200759

increased by0.46%

Lines of code

3118

increased by0.68%

Number of low supply chain risk alerts

33

decreased by-26.67%

No dependency changes