@cpmech/basic - npm Package Compare versions

Comparing version 0.2.1 to 0.2.2

dist/index.d.ts

 export { camelize } from './camelize';
 export { maybeWriteFile } from './maybeWriteFile';
+export { initEnvars } from './initEnvars';

dist/index.js

@@ -40,3 +40,20 @@ 'use strict';
 
+const initEnvars = (envars) => {
+    Object.keys(envars).forEach(key => {
+        if (Object.prototype.hasOwnProperty.call(process.env, key)) {
+            if (process.env[key]) {
+                envars[key] = process.env[key];
+            }
+            else {
+                throw new Error(`envar ${key} must not be empty`);
+            }
+        }
+        else {
+            throw new Error(`cannot find envar ${key} from .env`);
+        }
+    });
+};
+
 exports.camelize = camelize;
+exports.initEnvars = initEnvars;
 exports.maybeWriteFile = maybeWriteFile;

package.json

 {
   "name": "@cpmech/basic",
-  "version": "0.2.1",
+  "version": "0.2.2",
   "license": "MIT",
@@ -5,0 +5,0 @@ "author": {

New alerts

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 2 instances in 1 package

Improved metrics

Total package byte prevSize

6190

increased by19.94%

Lines of code

105

increased by43.84%

Worsened metrics

Number of low supply chain risk alerts

9

increased by200%

No dependency changes