@spinajs/configuration - npm Package Compare versions

Comparing version 2.0.429 to 2.0.430

lib/cjs/sources.js

@@ -85,2 +85,8 @@ "use strict";
         ];
+        if (process.env.WORKSPACE_ROOT_PATH) {
+            this.CommonDirs = this.CommonDirs.concat([
+                // for monorepo setups
+                (0, path_1.normalize)((0, path_1.join)((0, path_1.resolve)(process.env.WORKSPACE_ROOT_PATH), isESMMode ? 'node_modules/@spinajs/*/lib/mjs/config' : 'node_modules/@spinajs/*/lib/cjs/config')),
+            ]);
+        }
         // try to find root folder with node_modules
@@ -87,0 +93,0 @@ // on server environment

lib/mjs/sources.js

@@ -46,2 +46,8 @@ var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
         ];
+        if (process.env.WORKSPACE_ROOT_PATH) {
+            this.CommonDirs = this.CommonDirs.concat([
+                // for monorepo setups
+                normalize(join(resolve(process.env.WORKSPACE_ROOT_PATH), isESMMode ? 'node_modules/@spinajs/*/lib/mjs/config' : 'node_modules/@spinajs/*/lib/cjs/config')),
+            ]);
+        }
         // try to find root folder with node_modules
@@ -48,0 +54,0 @@ // on server environment

package.json

 {
   "name": "@spinajs/configuration",
-  "version": "2.0.429",
+  "version": "2.0.430",
   "description": "framework configuration module",
@@ -55,7 +55,7 @@ "main": "lib/cjs/index.js",
   "dependencies": {
-    "@spinajs/configuration-common": "^2.0.429",
-    "@spinajs/di": "^2.0.429",
-    "@spinajs/exceptions": "^2.0.429",
-    "@spinajs/internal-logger": "^2.0.429",
-    "@spinajs/util": "2.0.429",
+    "@spinajs/configuration-common": "^2.0.430",
+    "@spinajs/di": "^2.0.430",
+    "@spinajs/exceptions": "^2.0.430",
+    "@spinajs/internal-logger": "^2.0.430",
+    "@spinajs/util": "2.0.430",
     "ajv": "^8.12.0",
@@ -62,0 +62,0 @@ "ajv-formats": "^2.1.1",

New alerts

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 4 instances in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

Fixed alerts

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 3 instances in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

AI-detected potential code anomaly

Supply chain risk

AI has identified unusual behaviors that may pose a security risk.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

476793

0.27%

Lines of code

2064

0.58%

Worsened metrics

Number of low supply chain risk alerts

28

16.67%

Dependency changes

• + Added

  @spinajs/util@2.0.430
  (transitive)

• - Removed

  @spinajs/util@2.0.429
  (transitive)

• Updated

  @spinajs/configuration-common@^2.0.430

• Updated

  @spinajs/di@^2.0.430

• Updated

  @spinajs/exceptions@^2.0.430

• Updated

  @spinajs/internal-logger@^2.0.430

• Updated

  @spinajs/util@2.0.430