@gasket/utils - npm Package Compare versions

Comparing version 7.2.2 to 7.2.3

lib/get-package-latest-version.js

@@ -5,3 +5,3 @@ const runShellCommand = require('./run-shell-command');
  * Get the latest version of a package from npm
- * @type {import('./index').getPackageLatestVersion}
+ * @type {import('@gasket/utils').getPackageLatestVersion}
  */
@@ -8,0 +8,0 @@ module.exports = async function getPackageLatestVersion(pkgName, options = {}) {

lib/index.d.ts

@@ -8,5 +8,5 @@ import type { MaybeAsync } from '@gasket/core';
   /** Name of manager, either `npm` (default) or `yarn` */
-  packageManager: string;
+  packageManager?: string;
   /** Target directory where `node_module` should exist */
-  dest: string;
+  dest?: string;
 }
@@ -13,0 +13,0 @@

lib/run-shell-command.js

@@ -5,3 +5,3 @@ /* eslint-disable max-params */
 
-/** @type {import('./index').runShellCommand} */
+/** @type {import('@gasket/utils').runShellCommand} */
 function runShellCommand(cmd, argv, options = {}, debug = false) {
@@ -8,0 +8,0 @@ const { signal, ...opts } = options;

package.json

 {
   "name": "@gasket/utils",
-  "version": "7.2.2",
+  "version": "7.2.3",
   "description": "Reusable utilities for Gasket internals",
@@ -55,3 +55,3 @@ "files": [
   "devDependencies": {
-    "@gasket/core": "^7.2.2",
+    "@gasket/core": "^7.2.3",
     "@types/concat-stream": "^2.0.3",
@@ -65,3 +65,2 @@ "@types/cross-spawn": "^6.0.6",
     "eslint-plugin-jest": "^28.6.0",
-    "eslint-plugin-json": "^3.1.0",
     "eslint-plugin-unicorn": "^55.0.0",
@@ -97,3 +96,3 @@ "jest": "^29.7.0",
         "files": [
-          "*.ts"
+          "lib/*.ts"
         ],
@@ -104,6 +103,3 @@ "extends": [
         "rules": {
-          "jsdoc/require-jsdoc": "off",
-          "jsdoc/require-param-description": "off",
-          "jsdoc/require-param-type": "off",
-          "jsdoc/require-returns": "off"
+          "jsdoc/*": "off"
         }
@@ -116,3 +112,3 @@ }
   ],
-  "gitHead": "f34775900acd2c6a6b3a224751c6dc091b7f50fe"
+  "gitHead": "3fb21dbc6f75b8b9619a1e70073a504f84a29943"
 }

New alerts

Shell access

Supply chain risk

This module accesses the system shell. Accessing the system shell increases the risk of executing arbitrary code.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 3 instances in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

Fixed alerts

Shell access

Supply chain risk

This module accesses the system shell. Accessing the system shell increases the risk of executing arbitrary code.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 3 instances in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

Improved metrics

Dev dependency count

12

-7.69%

Worsened metrics

Total package byte prevSize

24060

-0.7%

No dependency changes