@knit/needle - npm Package Compare versions

Comparing version 0.0.37 to 0.0.43

dist/lib/index.js

@@ -12,15 +12,21 @@ 'use strict';
 
+var pkgNeedle = (pkg.knit || {}).needle || {};
+
+var pkgPaths = (pkgNeedle || {}).paths || {};
 var ROOT_DIR = process.env.PWD || '';
-var MOD_STUB = path.join('modules', 'node_modules');
-var DIST_STUB = 'dist';
-var LIB_STUB = 'lib';
-var ES6_STUB = 'es6';
-var UMD_STUB = 'umd';
-var TESTS_STUB = '__tests__';
-var DATA_STUB = 'data';
-var ENTRY_DIR = process.env.ENTRY_DIR || 'webpack_entry';
-var SERVER_HOST = process.env.HOST || 'localhost';
-var SERVER_PORT = parseInt(process.env.PORT, 10) || 8080;
-var PKG_ENV = ((pkg.knit || {}).needle || {}).env || {};
+var MOD_STUB = pkgPaths.modulesStub || path.join('modules', 'node_modules');
+var DIST_STUB = pkgPaths.distStub || 'dist';
+var LIB_STUB = pkgPaths.libStub || 'lib';
+var ES6_STUB = pkgPaths.es6Stub || 'es6';
+var UMD_STUB = pkgPaths.umdStub || 'umd';
+var TESTS_STUB = pkgPaths.testsStub || '__tests__';
+var DATA_STUB = pkgPaths.dataStub || 'data';
+var ENTRY_DIR = pkgPaths.entryStub || 'webpack_entry';
 
+var pkgServer = (pkgNeedle || {}).server || {};
+var SERVER_HOST = process.env.HOST || pkgServer.host || 'localhost';
+var SERVER_PORT = parseInt(process.env.PORT || pkgServer.port, 10) || 8080;
+
+var PKG_ENV = (pkgNeedle || {}).env || {};
+
 module.exports = {
@@ -30,2 +36,3 @@ paths: {
     data: path.join(ROOT_DIR, DATA_STUB),
+    dataStub: DATA_STUB,
     modulesStub: MOD_STUB,
@@ -47,3 +54,3 @@ modules: path.join(ROOT_DIR, MOD_STUB),
   },
-  proxy: process.env.PROXY || 'http://localhost:5000',
+  proxy: process.env.PROXY || (pkgNeedle || {}).proxy || 'http://localhost:5000',
   env: Object.assign({}, {
@@ -50,0 +57,0 @@ 'process.env': {

package.json

@@ -26,3 +26,3 @@ {
   "description": "Knitting needle",
-  "version": "0.0.37",
+  "version": "0.0.43",
   "main": "dist/lib/index.js",
@@ -29,0 +29,0 @@ "dependencies": {

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

69466

increased by0.53%

Lines of code

55

increased by7.84%

Number of low supply chain risk alerts

10

decreased by-9.09%

No dependency changes