@semrel-extra/topo - npm Package Compare versions

Comparing version 1.2.0 to 1.3.0

CHANGELOG.md

@@ -0,1 +1,8 @@
+# [1.3.0](https://github.com/semrel-extra/topo/compare/v1.2.0...v1.3.0) (2021-12-29)
+
+
+### Features
+
+* add packages filter ([c3e49f4](https://github.com/semrel-extra/topo/commit/c3e49f41889a14b7be21200853ba5ee0fc6e5bdd)), closes [#6](https://github.com/semrel-extra/topo/issues/6)
+
 # [1.2.0](https://github.com/semrel-extra/topo/compare/v1.1.0...v1.2.0) (2021-12-27)
@@ -2,0 +9,0 @@

package.json

 {
   "name": "@semrel-extra/topo",
-  "version": "1.2.0",
+  "version": "1.3.0",
   "description": "Helper to resolve monorepo dependencies graph",
@@ -25,4 +25,5 @@ "publishConfig": {
     "build:es5:ext": "rename 's/\\.js$/\\.cjs/' target/es5/*.js",
-    "test": "yarn test:unit",
+    "test": "yarn test:unit && yarn lint",
     "test:unit": "c8 -r html -r text -r lcov loadr -- uvu 'src/test/' -i fixturess",
+    "lint": "prettier --write src",
     "postupdate": "yarn && yarn build && yarn test"
@@ -34,11 +35,12 @@ },
   },
+  "files": [
+    "target",
+    "CHANGELOG.md",
+    "LICENSE",
+    "README.md"
+  ],
   "keywords": [
-    "lock",
-    "lockfile",
-    "lockfile2",
-    "yarn",
-    "yarnlock",
-    "yarn.lock",
-    "package-lock",
-    "npm"
+    "topo",
+    "graph",
+    "monorepo"
   ],
@@ -51,3 +53,2 @@ "author": "Anton Golub <[e-mail]>",
   "homepage": "https://github.com/semrel-extra/topo#readme",
-  "packageManager": "yarn@3.1.1",
   "dependencies": {
@@ -60,2 +61,3 @@ "@types/toposort": "^2.0.3",
   "devDependencies": {
+    "@types/micromatch": "^4.0.2",
     "c8": "^7.10.0",
@@ -65,2 +67,4 @@ "esbuild": "^0.14.8",
     "loadr": "^0.1.1",
+    "micromatch": "^4.0.4",
+    "prettier": "^2.5.1",
     "tsc-esm-fix": "^2.7.5",
@@ -70,3 +74,10 @@ "tsm": "^2.2.1",
     "uvu": "^0.5.2"
+  },
+  "prettier": {
+    "arrowParens": "avoid",
+    "quoteProps": "consistent",
+    "semi": false,
+    "singleQuote": true,
+    "trailingComma": "none"
   }
 }

README.md

@@ -31,2 +31,3 @@ # @semrel-extra/topo
   ],
+  // packages entries map
   packages: {
@@ -38,3 +39,3 @@ 'pkg-a': {
       },
-      manifestPath: '/absolute/path/to/packages/a/package.json',
+      manifestPath: '/path/to/project/root/packages/a/package.json',
       path: 'packages/pkg-a'
@@ -48,3 +49,13 @@ },
 
+### `filter()`
+Filter option is a function: gets `IPackageEntry` as argument, returns `boolean`
+```ts
+const graph = topo({
+  workspaces: ['packages/*'],
+  cwd: '/path/to/project/root',
+  filter: ({manifest}) => !manifest.private // to omit private packages from graph
+})
+```
+
 ## License
 [MIT](./LICENSE)

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Major refactor

Supply chain risk

Package has recently undergone a major refactor. It may be unstable or indicate significant internal changes. Use caution when updating to versions that include significant changes.

Found 1 instance in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Native code

Supply chain risk

Contains native code (e.g., compiled binaries or shared libraries). Including native code can obscure malicious behavior.

Found 2 instances in 1 package

Improved metrics

Number of lines in readme file

59

increased by22.92%

Number of medium supply chain risk alerts

1

decreased by-50%

Worsened metrics

Total package byte prevSize

14590

decreased by-99.89%

Dev dependency count

11

increased by37.5%

Number of package files

8

decreased by-68%

Lines of code

237

decreased by-5.2%

Number of low supply chain risk alerts

2

increased byInfinity%

No dependency changes