@octorelease/lerna - npm Package Compare versions

Comparing version 0.1.2 to 0.1.3

lib/version.js

@@ -46,2 +46,3 @@ "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
+const fs = __importStar(require("fs"));
 const path = __importStar(require("path"));
@@ -54,3 +55,4 @@ const utils = __importStar(require("./utils"));
             yield utils.lernaVersion(context.version.new);
-            context.changedFiles.push("lerna.json", "package.json", "package-lock.json");
+            const lockfilePath = fs.existsSync("npm-shrinkwrap.json") ? "npm-shrinkwrap.json" : "package-lock.json";
+            context.changedFiles.push("lerna.json", "package.json", lockfilePath);
             for (const { location } of packageInfo) {
@@ -57,0 +59,0 @@ const relLocation = path.relative(process.cwd(), location);

package.json

 {
   "name": "@octorelease/lerna",
-  "version": "0.1.2",
+  "version": "0.1.3",
   "description": "Octorelease plugin to perform actions related to NPM for Lerna monorepo.",
@@ -32,3 +32,3 @@ "main": "lib/index.js",
     "@actions/exec": "^1.1.0",
-    "@octorelease/npm": "^0.1.2"
+    "@octorelease/npm": "^0.1.3"
   },
@@ -35,0 +35,0 @@ "devDependencies": {

New alerts

New author

Supply chain risk

A new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

37472

increased by0.4%

Lines of code

494

increased by0.41%

Worsened metrics

Number of low supply chain risk alerts

3

increased by50%

Number of medium supply chain risk alerts

1

increased byInfinity%

Dependency changes

• Updated@octorelease/npm@^0.1.3