@twilio/cli-test - npm Package Compare versions

Comparing version 2.1.1 to 2.1.2

package.json

 {
   "name": "@twilio/cli-test",
   "description": "Test scaffolding for the twilio-cli",
-  "version": "2.1.1",
+  "version": "2.1.2",
   "author": "Twilio @twilio",
@@ -42,5 +42,5 @@ "bugs": "https://github.com/twilio/twilio-cli/issues",
   "scripts": {
-    "posttest": "eslint --ignore-path .gitignore . && npm audit --audit-level=moderate",
+    "posttest": "eslint --ignore-path .gitignore . && npm audit",
     "test": "nyc --check-coverage --lines 90 --reporter=html --reporter=text mocha --forbid-only \"test/**/*.test.js\""
   }
 }

README.md

 # twilio-cli Test
 
 This module contains core test scaffolding.
+
+**The default branch name for this repository has been changed to `main` as of 07/23/2020.**

src/index.js

@@ -74,2 +74,3 @@ const sinon = require('sinon');
         ctx.userConfig.addProfile('default', constants.FAKE_ACCOUNT_SID);
+        ctx.userConfig.setActiveProfile('default');
       }
@@ -76,0 +77,0 @@ };

New alerts

New author

Supply chain risk

A new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 1 instance in 1 package

Fixed alerts

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

4835

2.61%

Lines of code

90

1.12%

Number of lines in readme file

6

50%

Worsened metrics

Number of medium supply chain risk alerts

1

Infinity%

No dependency changes