@definitelytyped/dts-critic - npm Package Compare versions

Comparing version 0.0.180 to 0.0.181

CHANGELOG.md

 # @definitelytyped/dts-critic
 
+## 0.0.181
+
+### Patch Changes
+
+- a5011acf: Disable corepack when we run npm
+
 ## 0.0.180
@@ -4,0 +10,0 @@

dist/index.js

@@ -191,2 +191,3 @@ "use strict";
         encoding: "utf8",
+        env: { ...process.env, COREPACK_ENABLE_STRICT: "0" },
     });
@@ -297,3 +298,7 @@ const info = JSON.parse(infoResult.stdout || infoResult.stderr);
     const fullName = `${npmName}@${version}`;
-    const cpOpts = { encoding: "utf8", maxBuffer: 100 * 1024 * 1024 };
+    const cpOpts = {
+        encoding: "utf8",
+        maxBuffer: 100 * 1024 * 1024,
+        env: { ...process.env, COREPACK_ENABLE_STRICT: "0" },
+    };
     const npmPack = cp.execFileSync("npm", ["pack", fullName, "--json", "--silent"], cpOpts).trim();
@@ -300,0 +305,0 @@ // https://github.com/npm/cli/issues/3405

index.ts

@@ -194,2 +194,3 @@ import yargs = require("yargs");
     encoding: "utf8",
+    env: { ...process.env, COREPACK_ENABLE_STRICT: "0" },
   });
@@ -302,3 +303,7 @@ const info = JSON.parse(infoResult.stdout || infoResult.stderr);
   const fullName = `${npmName}@${version}`;
-  const cpOpts = { encoding: "utf8", maxBuffer: 100 * 1024 * 1024 } as const;
+  const cpOpts = {
+    encoding: "utf8",
+    maxBuffer: 100 * 1024 * 1024,
+    env: { ...process.env, COREPACK_ENABLE_STRICT: "0" },
+  } as const;
   const npmPack = cp.execFileSync("npm", ["pack", fullName, "--json", "--silent"], cpOpts).trim();
@@ -305,0 +310,0 @@ // https://github.com/npm/cli/issues/3405

package.json

 {
   "name": "@definitelytyped/dts-critic",
-  "version": "0.0.180",
+  "version": "0.0.181",
   "author": "Nathan Shively-Sanders",
@@ -5,0 +5,0 @@ "description": "Checks a new .d.ts against the Javascript source and tells you what problems it has",

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

205699

increased by0.24%

Lines of code

3298

increased by0.3%

Worsened metrics

Number of low supply chain risk alerts

6

increased by50%

No dependency changes