@lavamoat/allow-scripts
Advanced tools
@lavamoat/allow-scripts - npm Package Compare versions
Comparing version 2.5.0 to 2.5.1
@@ -1,48 +0,15 @@ | ||
| # Change Log | ||
| # Changelog | ||
| All notable changes to this project will be documented in this file. | ||
| See [Conventional Commits](https://conventionalcommits.org) for commit guidelines. | ||
| ## [2.5.1](https://github.com/LavaMoat/LavaMoat/compare/allow-scripts-v2.5.0...allow-scripts-v2.5.1) (2023-09-14) | ||
| ## 2.5.0 (2023-09-12) | ||
| ### Features | ||
| * Prevent bin scripts confusion by taking control of linking node_modules/.bin/ with allow-scripts ([#390](https://github.com/LavaMoat/LavaMoat/issues/390)) ([de6cf8e](https://github.com/LavaMoat/LavaMoat/commit/de6cf8ea31ff4f603da167a09efb60097d07a9a4)) | ||
| ### Bug Fixes | ||
| * **allow-scripts:** avoid failure if preinstall-always-fail already installed ([#423](https://github.com/LavaMoat/LavaMoat/issues/423)) ([644b102](https://github.com/LavaMoat/LavaMoat/commit/644b1024e4be35d414dd30b48ee578c16d74847d)) | ||
| * Clean up readmes, document policy details, fix lavamoat-node docs ([#362](https://github.com/LavaMoat/LavaMoat/issues/362)) ([ae4404d](https://github.com/LavaMoat/LavaMoat/commit/ae4404dda2afc18cf79bb418753e8d706b0d3374)) | ||
| * disable scripts for yarn3 with config ([#385](https://github.com/LavaMoat/LavaMoat/issues/385)) ([9ea1c26](https://github.com/LavaMoat/LavaMoat/commit/9ea1c26bec7a00c93137fc35f164ce8dd7b6f2fb)) | ||
| * remove redundant engine entries from package.json ([#411](https://github.com/LavaMoat/LavaMoat/issues/411)) ([190391a](https://github.com/LavaMoat/LavaMoat/commit/190391ae3fce9aae1c28b45efd0927c1a287975c)) | ||
| * support nodejs >=19 in packages not depending on lavamoat-core ([#586](https://github.com/LavaMoat/LavaMoat/issues/586)) ([0966744](https://github.com/LavaMoat/LavaMoat/commit/096674432d297942796af0e685cab9477680591e)), closes [#552](https://github.com/LavaMoat/LavaMoat/issues/552) | ||
| * normalize all package versions ([0800c11](https://github.com/LavaMoat/LavaMoat/commit/0800c113c3504af312d904c48eb9a6844b10d6b1)) | ||
| ### Reverts | ||
| ### Dependencies | ||
| * Revert "license - add missing license file" ([f139580](https://github.com/LavaMoat/LavaMoat/commit/f1395808ce5c79b8a2b184d3eb5fe550435b33a1)) | ||
| ## 2.4.0 (2023-09-12) | ||
| ### Features | ||
| * Prevent bin scripts confusion by taking control of linking node_modules/.bin/ with allow-scripts ([#390](https://github.com/LavaMoat/LavaMoat/issues/390)) ([de6cf8e](https://github.com/LavaMoat/LavaMoat/commit/de6cf8ea31ff4f603da167a09efb60097d07a9a4)) | ||
| ### Bug Fixes | ||
| * **allow-scripts:** avoid failure if preinstall-always-fail already installed ([#423](https://github.com/LavaMoat/LavaMoat/issues/423)) ([644b102](https://github.com/LavaMoat/LavaMoat/commit/644b1024e4be35d414dd30b48ee578c16d74847d)) | ||
| * Clean up readmes, document policy details, fix lavamoat-node docs ([#362](https://github.com/LavaMoat/LavaMoat/issues/362)) ([ae4404d](https://github.com/LavaMoat/LavaMoat/commit/ae4404dda2afc18cf79bb418753e8d706b0d3374)) | ||
| * disable scripts for yarn3 with config ([#385](https://github.com/LavaMoat/LavaMoat/issues/385)) ([9ea1c26](https://github.com/LavaMoat/LavaMoat/commit/9ea1c26bec7a00c93137fc35f164ce8dd7b6f2fb)) | ||
| * remove redundant engine entries from package.json ([#411](https://github.com/LavaMoat/LavaMoat/issues/411)) ([190391a](https://github.com/LavaMoat/LavaMoat/commit/190391ae3fce9aae1c28b45efd0927c1a287975c)) | ||
| * support nodejs >=19 in packages not depending on lavamoat-core ([#586](https://github.com/LavaMoat/LavaMoat/issues/586)) ([0966744](https://github.com/LavaMoat/LavaMoat/commit/096674432d297942796af0e685cab9477680591e)), closes [#552](https://github.com/LavaMoat/LavaMoat/issues/552) | ||
| ### Reverts | ||
| * Revert "license - add missing license file" ([f139580](https://github.com/LavaMoat/LavaMoat/commit/f1395808ce5c79b8a2b184d3eb5fe550435b33a1)) | ||
| * The following workspace dependencies were updated | ||
| * dependencies | ||
| * @lavamoat/aa bumped from ^3.1.1 to ^3.1.5 |
| { | ||
| "name": "@lavamoat/allow-scripts", | ||
| "version": "2.5.0", | ||
| "version": "2.5.1", | ||
| "main": "src/index.js", | ||
@@ -14,3 +14,3 @@ "bin": { | ||
| "dependencies": { | ||
| "@lavamoat/aa": "^3.1.4", | ||
| "@lavamoat/aa": "^3.1.5", | ||
| "@npmcli/run-script": "^6.0.0", | ||
@@ -50,3 +50,3 @@ "bin-links": "4.0.1", | ||
| }, | ||
| "gitHead": "0de2b246fbe4f4a6e14f3fce021777cbd3102447" | ||
| "gitHead": "5fb4a8824b4100150f891fabf17448a77de48498" | ||
| } |
New alerts
License Policy Violation
LicenseThis package is not allowed per your license policy. Review the package's license to ensure compliance.
Found 1 instance in 1 package
New author
Supply chain riskA new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.
Found 1 instance in 1 package
Fixed alerts
License Policy Violation
LicenseThis package is not allowed per your license policy. Review the package's license to ensure compliance.
Found 1 instance in 1 package
New author
Supply chain riskA new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.
Found 1 instance in 1 package
Worsened metrics
- Total package byte prevSize
- decreased by-6.44%
43503
Dependency changes
Updated@lavamoat/aa@^3.1.5