@featurepeek/travis - npm Package Compare versions

Comparing version 0.0.1 to 0.0.2

package.json

 {
   "private": false,
   "name": "@featurepeek/travis",
-  "version": "0.0.1",
+  "version": "0.0.2",
   "main": "index.js",
@@ -6,0 +6,0 @@ "bin": {

src/static.js

@@ -13,3 +13,5 @@ const fs = require('fs')
   const repo = pullRequestSlug.split('/')[1]
-  const branch = process.env.TRAVIS_BRANCH || process.env.TRAVIS_PULL_REQUEST_BRANCH
+  const branch = process.env.TRAVIS_PULL_REQUEST_BRANCH
+  const sha1 = process.env.TRAVIS_PULL_REQUEST_SHA
+  const job = process.env.TRAVIS_JOB_NUMBER
 
@@ -40,2 +42,4 @@ const cwd = process.env.TRAVIS_BUILD_DIR
         branch,
+        sha1,
+        job,
       },
@@ -42,0 +46,0 @@ })

New alerts

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 2 instances in 1 package

Fixed alerts

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

17215

increased by0.54%

Lines of code

129

increased by3.2%

Worsened metrics

Number of low supply chain risk alerts

10

increased by11.11%

No dependency changes