@springtree/buildinfo - npm Package Compare versions

Comparing version 0.0.8 to 0.0.9

buildinfo.js

@@ -32,6 +32,6 @@ const fs = require('fs');
     version: pkg.version,
-    buildNr: process.env.BUILD_ID || process.env.BUILD_NUMBER || process.env.TRAVIS_BUILD_NUMBER || process.env.BITRISE_BUILD_NUMBER || '',
+    buildNr: process.env.BUILD_ID || process.env.BUILD_NUMBER || process.env.TRAVIS_BUILD_NUMBER || process.env.BITRISE_BUILD_NUMBER || process.env.GITHUB_RUN_ID || '',
     buildTime: (new Date).toISOString(),
-    branch: process.env.BRANCH || process.env.BRANCH_NAME || process.env.TRAVIS_BRANCH || process.env.BITRISE_GIT_BRANCH || '',
-    commit: process.env.COMMIT_REF || process.env.COMMIT_HASH || process.env.TRAVIS_COMMIT || process.env.GIT_CLONE_COMMIT_HASH || ''
+    branch: process.env.BRANCH || process.env.BRANCH_NAME || process.env.TRAVIS_BRANCH || process.env.BITRISE_GIT_BRANCH || process.env.GITHUB_REF_NAME  || '',
+    commit: process.env.COMMIT_REF || process.env.COMMIT_HASH || process.env.TRAVIS_COMMIT || process.env.GIT_CLONE_COMMIT_HASH || process.env.GITHUB_SHA ||''
   };
@@ -38,0 +38,0 @@

package.json

 {
   "name": "@springtree/buildinfo",
-  "version": "0.0.8",
+  "version": "0.0.9",
   "description": "Script for generating build.json file containing build time info",
@@ -5,0 +5,0 @@ "main": "index.js",

README.md

@@ -11,9 +11,9 @@ # Buildinfo
 {
-  name: 'my-application',
-  description: 'My pretty application',
-  version: '0.0.2',
-  buildNr: '123',
-  buildTime: '2019-12-05T11:37:36.892Z',
-  branch: 'master',
-  commit: '85a40aaf83e1ed05ba7ef3d3589fa0dce4286e6d'
+  "name": "my-application",
+  "description": "My pretty application",
+  "version": "0.0.2",
+  "buildNr": "123",
+  "buildTime": "2019-12-05T11:37:36.892Z",
+  "branch": "master",
+  "commit": "85a40aaf83e1ed05ba7ef3d3589fa0dce4286e6d"
 }
@@ -28,2 +28,3 @@ ```
 - Netlify
+- Github
 
@@ -30,0 +31,0 @@ Usage:

New alerts

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 3 instances in 1 package

Improved metrics

Total package byte prevSize

5074

increased by2.2%

Number of lines in readme file

43

increased by2.38%

Worsened metrics

Number of low supply chain risk alerts

26

increased by13.04%

No dependency changes