@heroku-cli/command - npm Package Compare versions

Comparing version 8.4.0 to 8.4.1

lib/api-client.js

@@ -96,2 +96,5 @@ "use strict";
                         if (opts.retryAuth !== false && err.http.statusCode === 401 && err.body.id === 'unauthorized') {
+                            if (process.env.HEROKU_API_KEY) {
+                                throw new Error('The token provided to HEROKU_API_KEY is invalid. Please double-check that you have the correct token, or run `heroku login` without HEROKU_API_KEY set.');
+                            }
                             if (!self.authPromise)
@@ -98,0 +101,0 @@ self.authPromise = self.login();

package.json

 {
   "name": "@heroku-cli/command",
   "description": "base class for Heroku CLI commands",
-  "version": "8.4.0",
+  "version": "8.4.1",
   "author": "Jeff Dickey @jdxcode",
@@ -6,0 +6,0 @@ "bugs": "https://github.com/heroku/heroku-cli-command/issues",

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

New author

Supply chain risk

A new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

60472

increased by0.49%

Lines of code

1257

increased by0.24%

Worsened metrics

Number of low supply chain risk alerts

19

increased by5.56%

Number of medium supply chain risk alerts

15

increased by7.14%

No dependency changes