@lavamoat/aa - npm Package Compare versions

Comparing version 4.0.0 to 4.0.1

CHANGELOG.md

 # Changelog
 
+## [4.0.1](https://github.com/LavaMoat/LavaMoat/compare/aa-v4.0.0...aa-v4.0.1) (2024-01-18)
+
+
+### Bug Fixes
+
+* **deps:** pin dependencies ([4006c1f](https://github.com/LavaMoat/LavaMoat/commit/4006c1f386c3024e8a8092ded9b98ede20de084e))
+
 ## [4.0.0](https://github.com/LavaMoat/LavaMoat/compare/aa-v3.1.5...aa-v4.0.0) (2023-10-18)
@@ -4,0 +11,0 @@

package.json

 {
   "name": "@lavamoat/aa",
-  "version": "4.0.0",
-  "main": "src/index.js",
+  "version": "4.0.1",
+  "description": "LavaMoat's secure package naming convention",
+  "author": "kumavis",
+  "license": "MIT",
+  "engines": {
+    "node": "^16.20.0 || ^18.0.0 || ^20.0.0"
+  },
   "bin": {
     "lavamoat-ls": "src/cli.js"
   },
-  "license": "MIT",
-  "publishConfig": {
-    "access": "public"
+  "main": "src/index.js",
+  "types": "./types/index.d.ts",
+  "directories": {
+    "test": "test"
   },
+  "files": [
+    "CHANGELOG.md",
+    "src",
+    "types",
+    "!*.tsbuildinfo",
+    "!tsconfig.json"
+  ],
   "scripts": {
+    "lint:deps": "depcheck",
     "test": "npm run test:run",
-    "test:run": "ava",
-    "lint:deps": "depcheck"
+    "test:run": "ava"
   },
-  "devDependencies": {
-    "@types/resolve": "^1.20.2"
-  },
   "dependencies": {
-    "resolve": "^1.22.3"
+    "resolve": "1.22.8"
   },
-  "description": "LavaMoat's secure package naming convention",
-  "directories": {
-    "test": "test"
+  "devDependencies": {
+    "@types/resolve": "1.20.6"
   },
-  "author": "kumavis",
-  "engines": {
-    "node": "^16.20.0 || ^18.0.0 || ^20.0.0"
+  "publishConfig": {
+    "access": "public"
   },
@@ -36,4 +44,3 @@ "ava": {
     "timeout": "30s"
-  },
-  "types": "./types/index.d.ts"
+  }
 }

README.md

@@ -5,3 +5,3 @@ ### @lavamoat/aa
 
-Named after a type of lava: ‘A‘ā https://volcanoes.usgs.gov/vsc/glossary/aa.html
+Named after a type of lava: ʻAʻā https://volcanoes.usgs.gov/vsc/glossary/aa.html
 
@@ -8,0 +8,0 @@ #### goals

src/index.js

@@ -21,3 +21,6 @@ 'use strict'
    * @param {string} self
-   * @returns {(readFileSync: (file: string) => (string|{toString(): string}), pkgfile: string) => Record<string,unknown>}
+   * @returns {(
+   *   readFileSync: (file: string) => string | { toString(): string },
+   *   pkgfile: string
+   * ) => Record<string, unknown>}
    */
@@ -78,3 +81,3 @@ const readPackageWithout = (self) => (readFileSync, pkgfile) => {
  * @param {string} packageDir
- * @returns {string|undefined}
+ * @returns {string | undefined}
  */
@@ -231,3 +234,3 @@ function wrappedResolveSync(resolve, depName, packageDir) {
  * @param {string} modulePath
- * @returns {string|undefined}
+ * @returns {string | undefined}
  */
@@ -248,3 +251,4 @@ function getPackageDirForModulePath(canonicalNameMap, modulePath) {
 /**
- * for comparing string lengths
+ * For comparing string lengths
+ *
  * @param {string} a
@@ -259,6 +263,7 @@ * @param {string} b
 /**
- * for package logical path names
+ * For package logical path names
+ *
  * @param {string} a
  * @param {string} b
- * @returns {0|1|-1}
+ * @returns {0 | 1 | -1}
  */
@@ -283,6 +288,7 @@ function comparePreferredPackageName(a, b) {
 /**
- * for comparing package logical path arrays (shorter is better)
+ * For comparing package logical path arrays (shorter is better)
+ *
  * @param {string[]} [aPath]
  * @param {string[]} [bPath]
- * @returns {0|1|-1}
+ * @returns {0 | 1 | -1}
  */
@@ -326,3 +332,3 @@ function comparePackageLogicalPaths(aPath, bPath) {
  * @typedef Resolver
- * @property {(path: string, opts: {basedir: string}) => string} sync
+ * @property {(path: string, opts: { basedir: string }) => string} sync
  */
@@ -338,3 +344,2 @@
 /**
- * @internal
  * @typedef WalkDepTreeOpts
@@ -346,6 +351,7 @@ * @property {string} packageDir
  * @property {Resolver} [resolve]
+ * @internal
  */
 
 /**
- * @typedef {Map<string, string> & {rootDir: string}} CanonicalNameMap
+ * @typedef {Map<string, string> & { rootDir: string }} CanonicalNameMap
  */

types/index.d.ts

@@ -34,3 +34,3 @@ export type Resolver = {
  * @param {string} modulePath
- * @returns {string|undefined}
+ * @returns {string | undefined}
  */
@@ -37,0 +37,0 @@ export function getPackageDirForModulePath(canonicalNameMap: CanonicalNameMap, modulePath: string): string | undefined;

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Install scripts

Supply chain risk

Install scripts are run when the package is installed. The majority of malware in npm is hidden in install scripts.

Found 2 instances in 1 package

Mixed license

License

(Experimental) Package contains multiple licenses.

Found 1 instance in 1 package

Improved metrics

Number of low license alerts

0

decreased by-100%

Number of high supply chain risk alerts

0

decreased by-100%

Worsened metrics

Total package byte prevSize

17001

decreased by-21.3%

Number of package files

10

decreased by-61.54%

Lines of code

397

decreased by-13.32%

Dependency changes

• Updatedresolve@1.22.8