@commitlint/load - npm Package Compare versions

Comparing version 7.6.2 to 8.0.0

lib/index.js

@@ -48,3 +48,3 @@ 'use strict';
 			base = loaded.filepath ? _path2.default.dirname(loaded.filepath) : options.cwd;
-			config = valid((0, _lodash.merge)(loaded.config, seed));
+			config = valid((0, _lodash.merge)({}, loaded.config, seed));
 			opts = (0, _lodash.merge)({ extends: [], rules: {}, formatter: '@commitlint/format' }, (0, _lodash.pick)(config, 'extends', 'plugins', 'ignores', 'defaultIgnores'));
@@ -51,0 +51,0 @@

lib/index.test.js

@@ -705,2 +705,27 @@ 'use strict';
 }.bind(this)));
+
+(0, _ava2.default)('does not mutate config module reference', t => new Promise(function ($return, $error) {
+	var file, cwd, configPath, before, after;
+	file = 'config/commitlint.config.js';
+	return Promise.resolve(_test.git.bootstrap('fixtures/specify-config-file')).then(function ($await_53) {
+		try {
+			cwd = $await_53;
+			configPath = _path2.default.join(cwd, file);
+			before = JSON.stringify(require(configPath));
+			return Promise.resolve((0, _2.default)({ arbitraryField: true }, { cwd, file })).then(function ($await_54) {
+				try {
+					after = JSON.stringify(require(configPath));
+
+
+					t.is(before, after);
+					return $return();
+				} catch ($boundEx) {
+					return $error($boundEx);
+				}
+			}.bind(this), $error);
+		} catch ($boundEx) {
+			return $error($boundEx);
+		}
+	}.bind(this), $error);
+}.bind(this)));
 //# sourceMappingURL=index.test.js.map

package.json

 {
   "name": "@commitlint/load",
-  "version": "7.6.2",
+  "version": "8.0.0",
   "description": "Load shared commitlint configuration",
@@ -59,7 +59,7 @@ "main": "lib/index.js",
   "devDependencies": {
-    "@commitlint/test": "^7.6.0",
-    "@commitlint/utils": "^7.6.0",
+    "@commitlint/test": "^8.0.0",
+    "@commitlint/utils": "^8.0.0",
     "ava": "0.22.0",
     "babel-cli": "6.26.0",
-    "babel-preset-commitlint": "^7.6.0",
+    "babel-preset-commitlint": "^8.0.0",
     "babel-register": "6.26.0",
@@ -72,4 +72,4 @@ "concurrently": "3.5.1",
   "dependencies": {
-    "@commitlint/execute-rule": "^7.6.0",
-    "@commitlint/resolve-extends": "^7.6.0",
+    "@commitlint/execute-rule": "^8.0.0",
+    "@commitlint/resolve-extends": "^8.0.0",
     "babel-runtime": "^6.23.0",
@@ -79,3 +79,4 @@ "cosmiconfig": "^5.2.0",
     "resolve-from": "^5.0.0"
-  }
+  },
+  "gitHead": "29d1cee10ee7734a85d97ef039c4ce2da633628c"
 }

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Dynamic require

Supply chain risk

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

88034

increased by2.16%

Lines of code

1085

increased by2.07%

Worsened metrics

Number of low supply chain risk alerts

8

increased by33.33%

Dependency changes

• + Added@commitlint/execute-rule@8.3.6(transitive)

• + Added@commitlint/resolve-extends@8.3.6(transitive)

• + Addedlodash@4.17.21(transitive)

• - Removed@commitlint/execute-rule@7.6.0(transitive)

• - Removed@commitlint/resolve-extends@7.6.0(transitive)

• Updated@commitlint/execute-rule@^8.0.0

• Updated@commitlint/resolve-extends@^8.0.0