@codeshift/initializer - npm Package Compare versions

Comparing version 0.1.2 to 0.1.3

CHANGELOG.md

 # @codeshift/initializer
 
+## 0.1.3
+
+### Patch Changes
+
+- 3d14938: Initialiser now uses current @codeshift/util version when publishing pacakges
+
 ## 0.1.2
@@ -4,0 +10,0 @@

dist/codeshift-initializer.cjs.dev.js

@@ -8,2 +8,3 @@ 'use strict';
 var recast = require('recast');
+var package_json = require('@codeshift/utils/package.json');
 
@@ -48,3 +49,3 @@ function _interopDefault (e) { return e && e.__esModule ? e : { 'default': e }; }
     dependencies: {
-      '@codeshift/utils': '*'
+      '@codeshift/utils': "^".concat(package_json.version)
     },
@@ -51,0 +52,0 @@ devDependencies: {

dist/codeshift-initializer.cjs.prod.js

@@ -8,2 +8,3 @@ 'use strict';
 var recast = require('recast');
+var package_json = require('@codeshift/utils/package.json');
 
@@ -48,3 +49,3 @@ function _interopDefault (e) { return e && e.__esModule ? e : { 'default': e }; }
     dependencies: {
-      '@codeshift/utils': '*'
+      '@codeshift/utils': "^".concat(package_json.version)
     },
@@ -51,0 +52,0 @@ devDependencies: {

package.json

 {
   "name": "@codeshift/initializer",
-  "version": "0.1.2",
+  "version": "0.1.3",
   "main": "dist/codeshift-initializer.cjs.js",
@@ -9,2 +9,3 @@ "types": "dist/codeshift-initializer.cjs.d.ts",
   "dependencies": {
+    "@codeshift/utils": "*",
     "fs-extra": "^9.1.0",
@@ -11,0 +12,0 @@ "recast": "^0.20.4",

src/index.ts

 import fs from 'fs-extra';
 import semver from 'semver';
 import * as recast from 'recast';
+import { version as utilVersion } from '@codeshift/utils/package.json';
 
@@ -17,3 +18,3 @@ export function getPackageJson(packageName: string, version: string = '0.0.0') {
       dependencies: {
-        '@codeshift/utils': '*',
+        '@codeshift/utils': `^${utilVersion}`,
       },
@@ -20,0 +21,0 @@ devDependencies: {

New alerts

Wildcard dependency

Quality

Package has a dependency with a floating version range. This can cause issues if the dependency publishes a new major version.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 1 instance in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

Fixed alerts

Major refactor

Supply chain risk

Package has recently undergone a major refactor. It may be unstable or indicate significant internal changes. Use caution when updating to versions that include significant changes.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 1 instance in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

14089

3.03%

Lines of code

337

0.9%

Number of medium supply chain risk alerts

0

-100%

Worsened metrics

Dependency count

5

25%

Number of medium quality alerts

1

Infinity%

Dependency changes

• + Added

  @codeshift/utils@*

• + Added

  @codeshift/utils@0.2.5
  (transitive)