@heroku-cli/command - npm Package Compare versions

Comparing version 7.0.10 to 7.0.11

lib/api_client.js

@@ -37,3 +37,3 @@ "use strict";
         this.options = options;
-        let apiUrl = url.URL ? new URL(vars_1.vars.apiUrl) : url.parse(vars_1.vars.apiUrl);
+        let apiUrl = url.URL ? new url.URL(vars_1.vars.apiUrl) : url.parse(vars_1.vars.apiUrl);
         let envHeaders = JSON.parse(process.env.HEROKU_HEADERS || '{}');
@@ -40,0 +40,0 @@ this.preauthPromises = {};

package.json

 {
   "name": "@heroku-cli/command",
   "description": "heroku specific functionality for the cli-engine",
-  "version": "7.0.10",
+  "version": "7.0.11",
   "author": "Jeff Dickey @jdxcode",
   "bugs": "https://github.com/heroku/cli-engine-heroku/issues",
   "dependencies": {
-    "@cli-engine/command": "^12.0.1",
+    "@cli-engine/command": "^12.0.3",
     "@cli-engine/config": "^5.0.10",
-    "cli-ux": "^2.0.16",
+    "cli-ux": "^2.0.21",
     "heroku-client": "3.0.5",
@@ -16,7 +16,7 @@ "http-call": "^4.0.6",
   "devDependencies": {
-    "@cli-engine/util": "^1.0.7",
+    "@cli-engine/util": "^1.0.9",
     "@heroku-cli/tslint": "^1.0.3",
     "@types/ansi-styles": "^2.0.30",
     "@types/chalk": "^2.2.0",
-    "@types/jest": "21.1.9",
+    "@types/jest": "22.0.0",
     "@types/nock": "9.1.0",
@@ -23,0 +23,0 @@ "@types/node": "8.5.2",

README.md

@@ -1,4 +0,5 @@
-# cli-engine-heroku
+# @cli-engine/heroku
 
 [![CircleCI](https://circleci.com/gh/heroku/cli-engine-heroku.svg?style=svg)](https://circleci.com/gh/heroku/cli-engine-heroku)
+[![Build status](https://ci.appveyor.com/api/projects/status/2o5qa4nbjryx8du5/branch/master?svg=true)](https://ci.appveyor.com/project/Heroku/cli-engine-heroku/branch/master)
 [![codecov](https://codecov.io/gh/heroku/cli-engine-heroku/branch/master/graph/badge.svg)](https://codecov.io/gh/heroku/cli-engine-heroku)

Fixed alerts

Shell access

Supply chain risk

This module accesses the system shell. Accessing the system shell increases the risk of executing arbitrary code.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 1 instance in 1 package

Improved metrics

Number of lines in readme file

6

increased by20%

Number of low supply chain risk alerts

11

decreased by-62.07%

Number of medium supply chain risk alerts

11

decreased by-21.43%

Worsened metrics

Total package byte prevSize

30314

decreased by-47.03%

Number of package files

32

decreased by-40.74%

Lines of code

838

decreased by-45.97%

Dependency changes

• Updated@cli-engine/command@^12.0.3

• Updatedcli-ux@^2.0.21