@changesets/cli
Advanced tools
@changesets/cli - npm Package Compare versions
@@ -291,3 +291,3 @@ 'use strict'; | ||
| logger.error("You must select at least one package to release"); | ||
| logger.error("(You most likely hit enter instead of space!)"); | ||
| logger.error("(Press space to mark/unmark one option. Press enter to confirm.)"); | ||
| packagesToRelease = await askInitialReleaseQuestion(defaultChoiceList); | ||
@@ -1378,3 +1378,3 @@ } while (packagesToRelease.length === 0); | ||
| if (command === "enter" && typeof tag !== "string") { | ||
| logger.error(`A tag must be passed when using prerelese enter`); | ||
| logger.error(`A tag must be passed when using prerelease enter`); | ||
| throw new errors.ExitError(1); | ||
@@ -1381,0 +1381,0 @@ } |
@@ -253,3 +253,3 @@ import mri from 'mri'; | ||
| error("You must select at least one package to release"); | ||
| error("(You most likely hit enter instead of space!)"); | ||
| error("(Press space to mark/unmark one option. Press enter to confirm.)"); | ||
| packagesToRelease = await askInitialReleaseQuestion(defaultChoiceList); | ||
@@ -1340,3 +1340,3 @@ } while (packagesToRelease.length === 0); | ||
| if (command === "enter" && typeof tag !== "string") { | ||
| error(`A tag must be passed when using prerelese enter`); | ||
| error(`A tag must be passed when using prerelease enter`); | ||
| throw new ExitError(1); | ||
@@ -1343,0 +1343,0 @@ } |
+7
-7
| { | ||
| "name": "@changesets/cli", | ||
| "version": "2.29.7", | ||
| "version": "2.29.8", | ||
| "description": "Organise your package versioning and publishing to make both contributors and maintainers happy", | ||
@@ -69,17 +69,17 @@ "bin": { | ||
| "dependencies": { | ||
| "@changesets/apply-release-plan": "^7.0.13", | ||
| "@changesets/apply-release-plan": "^7.0.14", | ||
| "@changesets/assemble-release-plan": "^6.0.9", | ||
| "@changesets/changelog-git": "^0.2.1", | ||
| "@changesets/config": "^3.1.1", | ||
| "@changesets/config": "^3.1.2", | ||
| "@changesets/errors": "^0.2.0", | ||
| "@changesets/get-dependents-graph": "^2.1.3", | ||
| "@changesets/get-release-plan": "^4.0.13", | ||
| "@changesets/get-release-plan": "^4.0.14", | ||
| "@changesets/git": "^3.0.4", | ||
| "@changesets/logger": "^0.1.1", | ||
| "@changesets/pre": "^2.0.2", | ||
| "@changesets/read": "^0.6.5", | ||
| "@changesets/read": "^0.6.6", | ||
| "@changesets/should-skip-package": "^0.1.2", | ||
| "@changesets/types": "^6.1.0", | ||
| "@changesets/write": "^0.4.0", | ||
| "@inquirer/external-editor": "^1.0.0", | ||
| "@inquirer/external-editor": "^1.0.2", | ||
| "@manypkg/get-packages": "^1.1.3", | ||
@@ -102,3 +102,3 @@ "ansi-colors": "^4.1.3", | ||
| "@changesets/test-utils": "*", | ||
| "@types/semver": "^7.5.0", | ||
| "@types/semver": "^7.7.1", | ||
| "human-id": "^4.1.1", | ||
@@ -105,0 +105,0 @@ "outdent": "^0.5.0", |
New alerts
Shell access
Supply chain riskThis module accesses the system shell. Accessing the system shell increases the risk of executing arbitrary code.
Found 1 instance in 1 package
Dynamic require
Supply chain riskDynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.
Found 1 instance in 1 package
Environment variable access
Supply chain riskPackage accesses environment variables, which may be a sign of credential stuffing or data theft.
Found 2 instances in 1 package
Filesystem access
Supply chain riskAccesses the file system, and could potentially read sensitive data.
Found 1 instance in 1 package
Long strings
Supply chain riskContains long string literals, which may be a sign of obfuscated or packed code.
Found 1 instance in 1 package
Fixed alerts
Shell access
Supply chain riskThis module accesses the system shell. Accessing the system shell increases the risk of executing arbitrary code.
Found 1 instance in 1 package
Dynamic require
Supply chain riskDynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.
Found 1 instance in 1 package
Environment variable access
Supply chain riskPackage accesses environment variables, which may be a sign of credential stuffing or data theft.
Found 2 instances in 1 package
Filesystem access
Supply chain riskAccesses the file system, and could potentially read sensitive data.
Found 1 instance in 1 package
Long strings
Supply chain riskContains long string literals, which may be a sign of obfuscated or packed code.
Found 1 instance in 1 package
Improved metrics
- Total package byte prevSize
130414
0.03%