@magijs/data-collection - npm Package Compare versions

Comparing version 0.0.1-alpha.29 to 0.0.1-alpha.31

esm/index.js

@@ -21,2 +21,8 @@ import path from 'path';
         }
+        // 是否存在package-lock.json
+        const lock = require(path.resolve(process.cwd(), 'package-lock.json'));
+        if (lock) {
+            // @ts-ignore
+            this.options.isPackageLock = true;
+        }
     }
@@ -23,0 +29,0 @@ /**

lib/index.js

@@ -26,2 +26,8 @@ "use strict";
         }
+        // 是否存在package-lock.json
+        const lock = require(path_1.default.resolve(process.cwd(), 'package-lock.json'));
+        if (lock) {
+            // @ts-ignore
+            this.options.isPackageLock = true;
+        }
     }
@@ -28,0 +34,0 @@ /**

package.json

 {
   "name": "@magijs/data-collection",
-  "version": "0.0.1-alpha.29",
+  "version": "0.0.1-alpha.31",
   "description": "企业级应用框架",
@@ -26,3 +26,3 @@ "main": "lib/index.js",
   },
-  "gitHead": "e76374722ee96298080979b0cb9dcd687d5c603e"
+  "gitHead": "312cd62181c2664ecf0cd65d363d164a1c95b67c"
 }

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Dynamic require

Supply chain risk

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

68473

increased by1.24%

Lines of code

1146

increased by1.06%

Worsened metrics

Number of low supply chain risk alerts

13

increased by18.18%

No dependency changes