@pnpm/lockfile-utils - npm Package Compare versions

Comparing version 3.0.8 to 3.1.0

lib/index.d.ts

 import { refToRelative } from 'dependency-path';
+import extendProjectsWithTargetDirs from './extendProjectsWithTargetDirs';
 import nameVerFromPkgSnapshot from './nameVerFromPkgSnapshot';
@@ -8,3 +9,3 @@ import packageIdFromSnapshot from './packageIdFromSnapshot';
 export * from '@pnpm/lockfile-types';
-export { nameVerFromPkgSnapshot, packageIdFromSnapshot, packageIsIndependent, pkgSnapshotToResolution, satisfiesPackageManifest, };
+export { extendProjectsWithTargetDirs, nameVerFromPkgSnapshot, packageIdFromSnapshot, packageIsIndependent, pkgSnapshotToResolution, satisfiesPackageManifest, };
 export declare const getPkgShortId: typeof refToRelative;

lib/index.js

@@ -16,4 +16,6 @@ "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.getPkgShortId = exports.satisfiesPackageManifest = exports.pkgSnapshotToResolution = exports.packageIsIndependent = exports.packageIdFromSnapshot = exports.nameVerFromPkgSnapshot = void 0;
+exports.getPkgShortId = exports.satisfiesPackageManifest = exports.pkgSnapshotToResolution = exports.packageIsIndependent = exports.packageIdFromSnapshot = exports.nameVerFromPkgSnapshot = exports.extendProjectsWithTargetDirs = void 0;
 const dependency_path_1 = require("dependency-path");
+const extendProjectsWithTargetDirs_1 = __importDefault(require("./extendProjectsWithTargetDirs"));
+exports.extendProjectsWithTargetDirs = extendProjectsWithTargetDirs_1.default;
 const nameVerFromPkgSnapshot_1 = __importDefault(require("./nameVerFromPkgSnapshot"));
@@ -20,0 +22,0 @@ exports.nameVerFromPkgSnapshot = nameVerFromPkgSnapshot_1.default;

lib/pkgSnapshotToResolution.js

@@ -35,3 +35,3 @@ "use strict";
     }
-    const { name } = nameVerFromPkgSnapshot_1.default(depPath, pkgSnapshot);
+    const { name } = (0, nameVerFromPkgSnapshot_1.default)(depPath, pkgSnapshot);
     const registry = pkgSnapshot.resolution['registry'] ||
@@ -57,3 +57,3 @@ (name[0] === '@' && registries[name.split('/')[0]]) ||
         }
-        return get_npm_tarball_url_1.default(name, version, { registry });
+        return (0, get_npm_tarball_url_1.default)(name, version, { registry });
     }
@@ -60,0 +60,0 @@ /* eslint-enable @typescript-eslint/dot-notation */

lib/satisfiesPackageManifest.js

@@ -13,5 +13,7 @@ "use strict";
         return false;
-    if (!equals_1.default({ ...pkg.devDependencies, ...pkg.dependencies, ...pkg.optionalDependencies }, importer.specifiers)) {
+    if (!(0, equals_1.default)({ ...pkg.devDependencies, ...pkg.dependencies, ...pkg.optionalDependencies }, importer.specifiers)) {
         return false;
     }
+    if (!(0, equals_1.default)(pkg.dependenciesMeta, importer.dependenciesMeta))
+        return false;
     for (const depField of types_1.DEPENDENCIES_FIELDS) {
@@ -18,0 +20,0 @@ const importerDeps = (_a = importer[depField]) !== null && _a !== void 0 ? _a : {};

package.json

 {
   "name": "@pnpm/lockfile-utils",
-  "version": "3.0.8",
+  "version": "3.1.0",
   "description": "Utils for dealing with pnpm-lock.yaml",
@@ -16,2 +16,3 @@ "main": "lib/index.js",
   "keywords": [
+    "pnpm6",
     "pnpm",
@@ -34,6 +35,6 @@ "shrinkwrap",
   "dependencies": {
-    "@pnpm/lockfile-types": "3.0.0",
-    "@pnpm/resolver-base": "8.0.4",
-    "@pnpm/types": "7.4.0",
-    "dependency-path": "8.0.4",
+    "@pnpm/lockfile-types": "3.1.0",
+    "@pnpm/resolver-base": "8.1.0",
+    "@pnpm/types": "7.5.0",
+    "dependency-path": "8.0.5",
     "get-npm-tarball-url": "^2.0.2",
@@ -44,3 +45,3 @@ "ramda": "^0.27.1"
   "scripts": {
-    "lint": "eslint -c ../../eslint.json src/**/*.ts test/**/*.ts",
+    "lint": "eslint src/**/*.ts test/**/*.ts",
     "_test": "jest",
@@ -47,0 +48,0 @@ "test": "pnpm run compile && pnpm run _test",

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

New author

Supply chain risk

A new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

22476

increased by19.19%

Number of package files

24

increased by14.29%

Lines of code

282

increased by17.5%

Worsened metrics

Number of medium supply chain risk alerts

1

increased byInfinity%

Dependency changes

• + Added@pnpm/lockfile-types@3.1.0(transitive)

• + Added@pnpm/resolver-base@8.1.0(transitive)

• + Added@pnpm/types@7.5.0(transitive)

• + Addeddependency-path@8.0.5(transitive)

• - Removed@pnpm/lockfile-types@3.0.0(transitive)

• - Removed@pnpm/resolver-base@8.0.4(transitive)

• - Removed@pnpm/types@7.4.0(transitive)

• - Removeddependency-path@8.0.4(transitive)

• Updated@pnpm/lockfile-types@3.1.0

• Updated@pnpm/resolver-base@8.1.0

• Updated@pnpm/types@7.5.0

• Updateddependency-path@8.0.5