@npmcli/arborist - npm Package Compare versions

Comparing version 0.0.0-pre.1 to 0.0.0-pre.2

package.json

 {
   "name": "@npmcli/arborist",
-  "version": "0.0.0-pre.1",
+  "version": "0.0.0-pre.2",
   "description": "Manage node_modules trees",
@@ -20,2 +20,3 @@ "dependencies": {
     "mutate-fs": "^2.1.1",
+    "require-inject": "^1.4.4",
     "tap": "^14.10.5",
@@ -38,5 +39,5 @@ "tcompare": "^3.0.4"
   "files": [
-    "index.js",
-    "lib/*.js"
+    "lib/"
   ],
+  "main": "lib/index.js",
   "tap": {
@@ -43,0 +44,0 @@ "100": true,

README.md

@@ -7,2 +7,5 @@ # @npmcli/arborist
 
+There's more documentation [in the notes
+folder](https://github.com/npm/arborist/tree/master/notes).
+
 ## USAGE
@@ -22,7 +25,2 @@
 
-  // prefer to deduplicate packages if possible, rather than choosing
-  // a newer version of a dependency.  Defaults to false, ie, always
-  // try to get the latest and greatest deps.
-  preferDedupe: true,
-
   // if not provided, registry requests are unauthenticated
@@ -78,2 +76,9 @@ auth: {
   //   - names: names of packages update (like `npm update foo`)
+  // prune: boolean, default true.  Prune extraneous nodes from the tree.
+  // preferDedupe: prefer to deduplicate packages if possible, rather than
+  //   choosing a newer version of a dependency.  Defaults to false, ie,
+  //   always try to get the latest and greatest deps.
+  // legacyBundling: Nest every dep under the node requiring it, npm v2 style.
+  //   No unnecessary deduplication.  Default false.
+
   // At the end of this process, arb.idealTree is set.
@@ -80,0 +85,0 @@ })

Fixed alerts

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

156806

increased by5.53%

Number of package files

26

increased by18.18%

Lines of code

3644

increased by5.23%

Number of lines in readme file

290

increased by1.75%

Number of low supply chain risk alerts

5

decreased by-28.57%

Worsened metrics

Dev dependency count

5

increased by25%

No dependency changes