@commitlint/resolve-extends - npm Package Compare versions

Comparing version 20.0.0 to 20.1.0

lib/index.js

@@ -0,1 +1,2 @@
+import { createRequire } from "node:module";
 import fs from "node:fs";
@@ -10,2 +11,6 @@ import path from "node:path";
 const dynamicImport = async (id) => {
+    if (id.endsWith(".json")) {
+        const require = createRequire(import.meta.url);
+        return require(id);
+    }
     const imported = await import(path.isAbsolute(id) ? pathToFileURL(id).toString() : id);
@@ -12,0 +17,0 @@ return ("default" in imported && imported.default) || imported;

package.json

 {
   "name": "@commitlint/resolve-extends",
   "type": "module",
-  "version": "20.0.0",
+  "version": "20.1.0",
   "description": "Lint your commit messages",
@@ -50,3 +50,3 @@ "main": "lib/index.js",
   },
-  "gitHead": "407be6c96b1a108ee012ed5330b0d80a165952d5"
+  "gitHead": "a8e86d252ad9e77e0b9bd929fd8409f824727f11"
 }

New alerts

Dynamic require

Supply chain risk

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

17335

2.19%

Lines of code

203

2.53%

Worsened metrics

Number of low supply chain risk alerts

1

Infinity%

No dependency changes