@pnpm/config - npm Package Compare versions

Comparing version 1.2.2 to 1.2.3

lib/index.js

@@ -85,9 +85,12 @@ "use strict";
     pnpmConfig.rawNpmConfig = Object.assign.apply(Object, npmConfig.list.reverse().concat([cliArgs]));
+    const npmGlobalPrefix = process.env.APPDATA
+        ? path.join(process.env.APPDATA, 'npm')
+        : npmConfig.globalPrefix;
     pnpmConfig.globalBin = process.platform === 'win32'
-        ? npmConfig.globalPrefix
-        : path.resolve(npmConfig.globalPrefix, 'bin');
+        ? npmGlobalPrefix
+        : path.resolve(npmGlobalPrefix, 'bin');
     pnpmConfig.bin = pnpmConfig.global
         ? pnpmConfig.globalBin
         : path.join(npmConfig.localPrefix, 'node_modules', '.bin');
-    pnpmConfig.globalPrefix = path.join(npmConfig.globalPrefix, 'pnpm-global');
+    pnpmConfig.globalPrefix = path.join(npmGlobalPrefix, 'pnpm-global');
     pnpmConfig.prefix = pnpmConfig.global
@@ -94,0 +97,0 @@ ? pnpmConfig.globalPrefix

package.json

 {
   "name": "@pnpm/config",
-  "version": "1.2.2",
+  "version": "1.2.3",
   "description": "Gets configs for pnpm",
@@ -46,3 +46,3 @@ "main": "lib/index.js",
     "tape": "^4.8.0",
-    "ts-node": "^6.0.3",
+    "ts-node": "^7.0.0",
     "tslint": "^5.8.0",
@@ -49,0 +49,0 @@ "typescript": "^2.9.1"

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

12320

increased by1.96%

Lines of code

125

increased by2.46%

Worsened metrics

Number of low supply chain risk alerts

3

increased by200%

No dependency changes