@forestadmin/devops - npm Package Compare versions

Comparing version 2.0.1 to 2.1.0

CHANGELOG.md

@@ -5,2 +5,6 @@ # Change Log
 
+## RELEASE 2.1.0 - 2020-04-17
+### Added
+- Technical - Automatically update status of clickup tasks.
+
 ## RELEASE 2.0.1 - 2020-04-14
@@ -7,0 +11,0 @@ ### Added

index.js

 const BadgeCoverageUpdater = require('./services/badge-coverage-updater');
 const ReleaseCreator = require('./services/release-creator');
 const ReleaseNoteCreator = require('./services/release-note-creator');
+const ClickUpStatusUpdater = require('./services/clickup-status-updater');
 
@@ -17,2 +18,6 @@ function ReleaseManager(options) {
 
+function ClickUpManager() {
+  this.updateStatus = () => new ClickUpStatusUpdater().handleEvent();
+}
+
 module.exports = {
@@ -22,2 +27,3 @@ ReleaseManager,
   CoverageManager,
+  ClickUpManager,
 };

package.json

 {
   "name": "@forestadmin/devops",
-  "version": "2.0.1",
+  "version": "2.1.0",
   "description": "Forest Admin internal DevOps toolbox",
   "main": "index.js",
-  "type": "module",
   "scripts": {
@@ -15,3 +14,4 @@ "lint": "./node_modules/eslint/bin/eslint.js ./*.js scripts services test utils",
     "readme:update-coverage": "yarn test:coverage && yarn coverage:report:lcov && node ./scripts/badge-coverage-updater.js",
-    "release": "node ./scripts/release.js"
+    "release": "node ./scripts/release.js",
+    "updateClickupStatus": "node scripts/update-clickup-status.js"
   },
@@ -35,2 +35,3 @@ "repository": {
   "dependencies": {
+    "axios": "^0.19.2",
     "@slack/client": "5.0.2",
@@ -37,0 +38,0 @@ "chalk": "2.4.2",

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

New author

Supply chain risk

A new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 2 instances in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

New author

Supply chain risk

A new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

89289

increased by9.68%

Number of package files

25

increased by13.64%

Lines of code

2329

increased by9.7%

Worsened metrics

Dependency count

7

increased by16.67%

Number of low supply chain risk alerts

10

increased by66.67%

Is type module

No

Dependency changes

• + Addedaxios@^0.19.2

• + Addedaxios@0.19.2(transitive)

• + Addedfollow-redirects@1.5.10(transitive)