@snyk/fix-pipenv-pipfile - npm Package Compare versions

Comparing version 0.4.3 to 0.5.2

dist/check-pip-env-installed.js

@@ -5,3 +5,3 @@ "use strict";
 const debugLib = require("debug");
-const sub_process_1 = require("./sub-process");
+const child_process_1 = require("@snyk/child-process");
 const debug = debugLib('snyk-fix:python:Pipfile');
@@ -24,3 +24,3 @@ function extractPipenvVersion(stdout) {
     try {
-        res = await sub_process_1.execute('pipenv', ['--version'], {});
+        res = await child_process_1.execute('pipenv', ['--version'], {});
     }
@@ -27,0 +27,0 @@ catch (e) {

dist/pipenv-install.d.ts

 import Bottleneck from 'bottleneck';
-import { ExecuteResponse } from './sub-process';
+import { ExecuteResponse } from '@snyk/child-process';
 interface PipEnvConfig {
@@ -4,0 +4,0 @@ python?: string;

dist/pipenv-install.js

@@ -6,3 +6,3 @@ "use strict";
 const bottleneck_1 = require("bottleneck");
-const sub_process_1 = require("./sub-process");
+const child_process_1 = require("@snyk/child-process");
 const debug = debugLib('snyk-fix:python:Pipfile');
@@ -31,3 +31,3 @@ const limiter = new bottleneck_1.default({
     try {
-        res = await sub_process_1.execute('pipenv', args, {
+        res = await child_process_1.execute('pipenv', args, {
             cwd: projectPath,
@@ -34,0 +34,0 @@ });

package.json

 {
   "name": "@snyk/fix-pipenv-pipfile",
   "description": "Snyk python ecosystem fix remediation",
-  "version": "0.4.3",
+  "version": "0.5.2",
   "main": "dist/index.js",
@@ -36,2 +36,3 @@ "scripts": {
   "dependencies": {
+    "@snyk/child-process": "^0.3.1",
     "bottleneck": "2.19.5",
@@ -47,4 +48,4 @@ "debug": "4.3.1",
     "@types/node": "^15.3.1",
-    "@typescript-eslint/eslint-plugin": "^2.18.0",
-    "@typescript-eslint/parser": "^4.22.1",
+    "@typescript-eslint/eslint-plugin": "^4.26.0",
+    "@typescript-eslint/parser": "^4.26.0",
     "eslint": "5.14",
@@ -69,3 +70,3 @@ "eslint-config-prettier": "^6.10.0",
   },
-  "gitHead": "094408004b73fc9056e969c7105c7a46f6df48d7"
+  "gitHead": "f247c50170cf67561cf870a12f72e2e2f7030511"
 }

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Shell access

Supply chain risk

This module accesses the system shell. Accessing the system shell increases the risk of executing arbitrary code.

Found 1 instance in 1 package

Improved metrics

Number of medium supply chain risk alerts

0

decreased by-100%

Worsened metrics

Total package byte prevSize

10158

decreased by-30.95%

Dependency count

6

increased by20%

Number of package files

14

decreased by-17.65%

Lines of code

130

decreased by-39.53%

Dependency changes

• + Added@snyk/child-process@^0.3.1

• + Added@snyk/child-process@0.3.3(transitive)