@tartine/common - npm Package Compare versions

Comparing version 1.0.13 to 1.0.14

dist/magic/magic-email.d.ts

@@ -9,2 +9,2 @@ import sg from "@sendgrid/mail";
    const customer = await stripe.customers.retrieve(session.customer);
- */ 
+ */

dist/magic/magic-email.js

@@ -51,2 +51,5 @@ "use strict";
 }
+if (!process.env.SENDGRID_SENDER_EMAIL) {
+    throw new Error("SENDGRID_SENDER_EMAIL must be defined as an environment variable");
+}
 mail_1.default.setApiKey(process.env.SENDGRID_API_KEY);
@@ -74,4 +77,9 @@ function generateMagicLink(email, landingPage) {
             message = {
-                to: "[e-mail]",
-                from: "[e-mail]",
+                from: {
+                    name: "potato@no-reply",
+                    email: process.env.SENDGRID_SENDER_EMAIL,
+                },
+                to: {
+                    email: email,
+                },
                 subject: "Your login credentials",
@@ -90,2 +98,2 @@ html: html,
    const customer = await stripe.customers.retrieve(session.customer);
- */ 
+ */

package.json

 {
   "name": "@tartine/common",
-  "version": "1.0.13",
+  "version": "1.0.14",
   "description": "Nothing but commons",
@@ -5,0 +5,0 @@ "main": "./dist/index.js",

New alerts

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

40998

0.68%

Lines of code

985

0.82%

Worsened metrics

Number of low supply chain risk alerts

9

28.57%

No dependency changes