@gasket/utils - npm Package Compare versions

Comparing version 7.0.0-next.29 to 7.0.0-next.30

lib/index.d.ts

@@ -56,16 +56,2 @@ import type { GasketConfig, GasketConfigDefinition, MaybeAsync } from '@gasket/core';
 
-/**
- * Tries to require a module, but ignores if it is not found. If not found,
- * result will be null.
- * @example
- * const { tryRequire } = require('@gasket/utils');
- *
- *  let someConfig = tryRequire('../might/be/a/path/to/some/file');
- *
- *  if(!someConfig) {
- *   someConfig = require('./default-config')
- * }
- */
-export function tryRequire(path: string): object | null;
-
 interface ConfigContext {
@@ -171,1 +157,3 @@ /** Name of environment */
 export function warnIfOutdated(pkgName: string, currentVersion: string): MaybeAsync<void>;
+
+export function getPackageLatestVersion(pkgName: string, options?: object): Promise<string>;

lib/index.js

@@ -1,3 +0,1 @@
-const tryRequire = require('./try-require');
-const { tryResolve } = require('./try-resolve');
 const applyConfigOverrides = require('./apply-config-overrides');
@@ -7,10 +5,10 @@ const runShellCommand = require('./run-shell-command');
 const warnIfOutdated = require('./warn-if-outdated');
+const getPackageLatestVersion = require('./get-package-latest-version');
 
 module.exports = {
-  tryRequire,
-  tryResolve,
   applyConfigOverrides,
   runShellCommand,
   PackageManager,
-  warnIfOutdated
+  warnIfOutdated,
+  getPackageLatestVersion
 };

lib/warn-if-outdated.js

@@ -1,2 +0,1 @@
-const runShellCommand = require('./run-shell-command');
 const semver = require('semver');
@@ -6,2 +5,3 @@ const chalk = require('chalk');
 const path = require('path');
+const getPackageLatestVersion = require('./get-package-latest-version');
 
@@ -38,10 +38,7 @@ const cachePath = path.join(__dirname, '..', '.cache'); // Place at root of package
     try {
-      const cmdResult = await runShellCommand('npm', ['view', pkgName, 'version'], {});
-      if (cmdResult?.stdout) {
-        const latestVersion = cmdResult.stdout.trim();
-        cache[LATEST_VERSION_UPDATE_TIME] = currentTime;
-        cache[LATEST_VERSION] = latestVersion;
-        await writeFile(cachePath, JSON.stringify(cache));
-        return latestVersion;
-      }
+      const latestVersion = await getPackageLatestVersion(pkgName, {});
+      cache[LATEST_VERSION_UPDATE_TIME] = currentTime;
+      cache[LATEST_VERSION] = latestVersion;
+      await writeFile(cachePath, JSON.stringify(cache));
+      return latestVersion;
     } catch (error) {
@@ -48,0 +45,0 @@ // eslint-disable-next-line no-console

package.json

 {
   "name": "@gasket/utils",
-  "version": "7.0.0-next.29",
+  "version": "7.0.0-next.30",
   "description": "Reusable utilities for Gasket internals",
@@ -50,3 +50,3 @@ "main": "lib",
   "devDependencies": {
-    "@gasket/core": "^7.0.0-next.29",
+    "@gasket/core": "^7.0.0-next.30",
     "@godaddy/dmd": "^1.0.4",
@@ -81,3 +81,3 @@ "abort-controller": "^3.0.0",
   ],
-  "gitHead": "7068aef0e4e8b7aaeb6e4e675d02858779d59ac9"
+  "gitHead": "0249719e07092027d6e8a077de03ec0bf5eb5124"
 }

Fixed alerts

Dynamic require

Supply chain risk

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

Found 1 instance in 1 package

Improved metrics

Number of low supply chain risk alerts

4

decreased by-33.33%

Worsened metrics

Total package byte prevSize

27025

decreased by-4.53%

Number of package files

11

decreased by-8.33%

Lines of code

485

decreased by-11.17%

No dependency changes