@studio/lambda - npm Package Compare versions

Comparing version 4.0.1 to 5.0.0

.lintstagedrc.js

+'use strict';
+
+module.exports = {
+  '*.js': 'eslint --fix',
+  '*.{js,md}': 'prettier --write'
+};

LICENSE

+Copyright (c) 2024 Maximilian Antoni
+
+Permission is hereby granted, free of charge, to any person
+obtaining a copy of this software and associated documentation
+files (the "Software"), to deal in the Software without
+restriction, including without limitation the rights to use,
+copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the
+Software is furnished to do so, subject to the following
+conditions:
+
+The above copyright notice and this permission notice shall be
+included in all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
+EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES
+OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
+NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT
+HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY,
+WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING
+FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR
+OTHER DEALINGS IN THE SOFTWARE.

.github/workflows/ci.yml

 name: Build
 
-on:
-  push:
-    branches:
-      - master
-  pull_request:
-    branches:
-      - master
+on: [push]
 
@@ -14,5 +8,7 @@ jobs:
     runs-on: ubuntu-latest
+    timeout-minutes: 5
+
     strategy:
       matrix:
-        node-version: ['16.x', '18.x', '20.x']
+        node-version: ['18.x', '20.x']
 
@@ -30,6 +26,8 @@ steps:
       - name: Lint
+        if: matrix.node-version == '20.x'
         run: npm run lint
       - name: Prettier
+        if: matrix.node-version == '20.x'
         run: npm run prettier:check
       - name: Test
         run: npm test

CHANGES.md

 # Changes
 
+## 5.0.0
+
+- [`50359f9`](https://github.com/javascript-studio/studio-lambda/commit/50359f942e13f5ff4f2f958ce66ecf4d119c69f1)
+  Use husky and lint-staged
+- [`7c72184`](https://github.com/javascript-studio/studio-lambda/commit/7c721842ffe07ca9dd2ae7507b24267cdbbf1dfb)
+  Drop node 16
+- [`abb5df7`](https://github.com/javascript-studio/studio-lambda/commit/abb5df7ab3400ad5f41511425c3c0c1a13d302a0)
+  Rename master to main
+- [`d0be735`](https://github.com/javascript-studio/studio-lambda/commit/d0be735b756ad7189a9abcabf4e7cf09a50441ee)
+  State MIT license in package.json
+- [`af1f621`](https://github.com/javascript-studio/studio-lambda/commit/af1f6217d7cdd75ad23e12a1abd16469a867eccd)
+  Add LICENSE
+
+_Released by [Maximilian Antoni](https://github.com/mantoni) on 2024-01-17._
+
 ## 4.0.1
@@ -4,0 +19,0 @@

package.json

 {
   "name": "@studio/lambda",
-  "version": "4.0.1",
+  "version": "5.0.0",
   "description": "JavaScript Studio lambda execution environment",
@@ -20,3 +20,4 @@ "author": "Maximilian Antoni <[e-mail]>",
     "prettier:check": "prettier --check '**/*.{js,json,md}'",
-    "prettier:write": "prettier --write '**/*.{js,json,md}'"
+    "prettier:write": "prettier --write '**/*.{js,json,md}'",
+    "prepare": "husky install"
   },
@@ -35,5 +36,8 @@ "eslintConfig": {
     "eslint": "^8.56.0",
+    "husky": "^8.0.3",
+    "lint-staged": "^15.2.0",
     "mocha": "^10.2.0",
     "prettier": "^3.1.1"
-  }
+  },
+  "license": "MIT"
 }

New alerts

Shell access

Supply chain risk

This module accesses the system shell. Accessing the system shell increases the risk of executing arbitrary code.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 10 instances in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

Fixed alerts

Shell access

Supply chain risk

This module accesses the system shell. Accessing the system shell increases the risk of executing arbitrary code.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 10 instances in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

56974

3.77%

Number of package files

40

8.11%

Lines of code

1293

0.39%

Worsened metrics

Dev dependency count

8

33.33%

No dependency changes