@sei-atl/devops - npm Package Compare versions

Comparing version 1.0.16 to 1.0.17

bin/module.js

@@ -63,4 +63,11 @@ #!/usr/bin/env node
     break;
+  case "print-epoch":
+    let epoch = (new Date()).getTime()+"";
+    console.log(epoch);
+    break;
+  case "pre-package-yaml":
+    require('..lib/utils.js').prePackageYaml(args);
+    break;
   default:
     console.log("you need to supply a command");
 }

lib/utils.js

@@ -185,3 +185,16 @@ const encryptionHelper = require('@sei-atl/encryption-helper');
     });
+  },
+
+  prePackageYaml: (args) => {
+    let yamlBoost = require('yaml-boost');
+    let fs = require('fs');
+
+    let inPath = args.in;
+    let outPath = args.out;
+    
+    let loaded = yamlBoost.load(inPath, args);
+    let dumped = yamlBoost.dump(loaded);
+    fs.writeFileSync(outPath,dumped);
   }
+
 };

package.json

 {
   "name": "@sei-atl/devops",
-  "version": "1.0.16",
+  "version": "1.0.17",
   "description": "",
@@ -22,2 +22,3 @@ "main": "./lib/index.js",
     "unidecode": "^0.1.8",
+    "yaml-boost": "^1.9.0",
     "yamljs": "^0.3.0"
@@ -24,0 +25,0 @@ },

tests/active/test.js

 let { assert, expect } = require('../../node_modules/chai');
 let utils = require('../../lib/utils.js');
+let fs = require('fs');
 
@@ -14,2 +15,20 @@ describe('Testing the devops cli', function() {
   });
+
+  describe('Testing prePackage', function() {
+    it('should pre package a yaml template', function(done) {
+      let uid = (new Date()).getTime()+"";
+      let inPath = "/tmp/"+uid;
+      let outPath = "/tmp/packaged-"+uid;
+      fs.writeFileSync("/tmp/"+uid,"Test:\n  Test2: value");
+      utils.prePackageYaml({
+        in: inPath,
+        out: outPath
+      });
+      let packaged = fs.readFileSync(outPath,'utf8');
+      expect(packaged).to.equal("Test:\n  Test2: value\n");
+      fs.unlinkSync(inPath);
+      fs.unlinkSync(outPath);
+      done();
+    });
+  });
 });

New alerts

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 1 instance in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

Fixed alerts

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 1 instance in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

21148

5.51%

Lines of code

613

5.87%

Worsened metrics

Dependency count

9

12.5%

Number of low supply chain risk alerts

6

50%

Dependency changes

• + Added

  yaml-boost@^1.9.0

• + Added

  argparse@2.0.1
  (transitive)

• + Added

  js-yaml@4.0.0
  (transitive)

• + Added

  lodash.get@4.4.2
  (transitive)

• + Added

  lodash.mergewith@4.6.2
  (transitive)

• + Added

  lodash.set@4.3.2
  (transitive)

• + Added

  yaml-boost@1.10.7
  (transitive)