@secretlint/secretlint-rule-preset-recommend - npm Package Compare versions

Comparing version 6.0.1 to 6.0.2

package.json

 {
     "name": "@secretlint/secretlint-rule-preset-recommend",
-    "version": "6.0.1",
+    "version": "6.0.2",
     "description": "Recommended rule preset of secretlint.",
@@ -48,26 +48,26 @@ "keywords": [
     "dependencies": {
-        "@secretlint/secretlint-rule-aws": "^6.0.1",
-        "@secretlint/secretlint-rule-basicauth": "^6.0.1",
-        "@secretlint/secretlint-rule-filter-comments": "^6.0.1",
-        "@secretlint/secretlint-rule-gcp": "^6.0.1",
-        "@secretlint/secretlint-rule-github": "^6.0.1",
-        "@secretlint/secretlint-rule-npm": "^6.0.1",
-        "@secretlint/secretlint-rule-privatekey": "^6.0.1",
-        "@secretlint/secretlint-rule-sendgrid": "^6.0.1",
-        "@secretlint/secretlint-rule-slack": "^6.0.1"
+        "@secretlint/secretlint-rule-aws": "^6.0.2",
+        "@secretlint/secretlint-rule-basicauth": "^6.0.2",
+        "@secretlint/secretlint-rule-filter-comments": "^6.0.2",
+        "@secretlint/secretlint-rule-gcp": "^6.0.2",
+        "@secretlint/secretlint-rule-github": "^6.0.2",
+        "@secretlint/secretlint-rule-npm": "^6.0.2",
+        "@secretlint/secretlint-rule-privatekey": "^6.0.2",
+        "@secretlint/secretlint-rule-sendgrid": "^6.0.2",
+        "@secretlint/secretlint-rule-slack": "^6.0.2"
     },
     "devDependencies": {
-        "@rollup/plugin-commonjs": "^22.0.2",
-        "@rollup/plugin-node-resolve": "^13.3.0",
-        "@rollup/plugin-typescript": "^8.5.0",
-        "@secretlint/tester": "^6.0.1",
-        "@types/mocha": "^9.1.1",
-        "@types/node": "^18.11.17",
+        "@rollup/plugin-commonjs": "^24.0.0",
+        "@rollup/plugin-node-resolve": "^15.0.1",
+        "@rollup/plugin-typescript": "^10.0.1",
+        "@secretlint/tester": "^6.0.2",
+        "@types/mocha": "^10.0.1",
+        "@types/node": "^18.11.18",
         "mocha": "^10.2.0",
-        "prettier": "^2.7.1",
+        "prettier": "^2.8.1",
         "rimraf": "^3.0.2",
-        "rollup": "^2.79.1",
+        "rollup": "^3.9.1",
         "ts-node": "^10.9.1",
         "ts-node-test-register": "^10.0.0",
-        "typescript": "^4.7.4"
+        "typescript": "^4.9.4"
     },
@@ -80,3 +80,3 @@ "engines": {
     },
-    "gitHead": "67f291f3857b462d2b998d00c26d3c58a26c0d72"
+    "gitHead": "15a9f79e558fed32a4cead3943754d6ec55890af"
 }

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 2 instances in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

New author

Supply chain risk

A new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

3056253

increased by3.61%

Lines of code

31693

increased by3.51%

Number of medium supply chain risk alerts

3

decreased by-25%

Worsened metrics

Number of low supply chain risk alerts

3

increased by200%

Dependency changes

• Updated@secretlint/secretlint-rule-aws@^6.0.2

• Updated@secretlint/secretlint-rule-basicauth@^6.0.2

• Updated@secretlint/secretlint-rule-filter-comments@^6.0.2

• Updated@secretlint/secretlint-rule-gcp@^6.0.2

• Updated@secretlint/secretlint-rule-github@^6.0.2

• Updated@secretlint/secretlint-rule-npm@^6.0.2

• Updated@secretlint/secretlint-rule-privatekey@^6.0.2

• Updated@secretlint/secretlint-rule-sendgrid@^6.0.2

• Updated@secretlint/secretlint-rule-slack@^6.0.2