@untool/core - npm Package Compare versions

Comparing version 2.0.0-alpha.4 to 2.0.0-alpha.5

CHANGELOG.md

@@ -6,2 +6,36 @@ # Change Log
 
+# [2.0.0-alpha.5](https://github.com/untool/untool/compare/v1.10.1...v2.0.0-alpha.5) (2019-12-06)
+
+
+### Bug Fixes
+
+* **core:** enable whitelisting of nested arrays ([ef7abcc](https://github.com/untool/untool/commit/ef7abccc693ee5fb24c1c17bc7a33098aafed0b1))
+* update dependency cosmiconfig to v6 ([7b2fc26](https://github.com/untool/untool/commit/7b2fc2618ebd474141dceb4470aec8914331ad84))
+* update dependency flat to v5 ([c616e38](https://github.com/untool/untool/commit/c616e38af25a498c2495bd133b8b3ed3d314277f))
+* use updated exports from cosmiconfig ([f4c991e](https://github.com/untool/untool/commit/f4c991e2411555ae14c9287bf8002a5a880fbf6e))
+
+
+### chore
+
+* **core:** bump minimum required node version ([cca1bcb](https://github.com/untool/untool/commit/cca1bcbd9db34e7d8d8fa912a7a6b6402fc4f7cc))
+
+
+### Features
+
+* bump all packages to their latest available versions ([e2c2d87](https://github.com/untool/untool/commit/e2c2d87e7de56b3a9c17c3e7eb7136e37e61b26e))
+* only include white-listed config in webpack bundle and env vars ([b20f621](https://github.com/untool/untool/commit/b20f621791ec18bdf2a7fa29262e1ae8cc15b8e1)), closes [#446](https://github.com/untool/untool/issues/446)
+* **core:** add default value syntax for env variables ([d041a64](https://github.com/untool/untool/commit/d041a6418f1eea6dad2c0697c61c0b70d6d3c69b)), closes [#448](https://github.com/untool/untool/issues/448)
+
+
+### BREAKING CHANGES
+
+* **core:** Untool drops support for Node v8 & non-LTS versions
+* The following peer dependencies have increased versions
+- `react` & `react-dom`: 16.8.0
+- `react-router-dom`: 5.0.0
+
+
+
+
+
 # [2.0.0-alpha.4](https://github.com/untool/untool/compare/v1.10.1...v2.0.0-alpha.4) (2019-10-24)
@@ -8,0 +42,0 @@

lib/loader.js

@@ -5,3 +5,3 @@ 'use strict';
 
-const cosmiconfig = require('cosmiconfig');
+const { cosmiconfigSync: cosmiconfig } = require('cosmiconfig');
 const { compatibleMessage } = require('check-error');
@@ -18,8 +18,8 @@
   load(context, module) {
-    const { loadSync } = cosmiconfig(this.namespace);
-    return loadSync(resolvePreset(context, module));
+    const { load } = cosmiconfig(this.namespace);
+    return load(resolvePreset(context, module));
   }
   search(stopDir) {
-    const { searchSync } = cosmiconfig(this.namespace, { stopDir });
-    return searchSync(stopDir);
+    const { search } = cosmiconfig(this.namespace, { stopDir });
+    return search(stopDir);
   }
@@ -26,0 +26,0 @@ loadPreset(context, preset) {

lib/utils.js

@@ -81,3 +81,3 @@ 'use strict';
     if (Array.isArray(item)) {
-      return item.map(replaceRecursive);
+      return item.map((nestedItem) => replaceRecursive(nestedItem, path));
     }
@@ -84,0 +84,0 @@ if (isPlainObject(item)) {

package.json

 {
   "name": "@untool/core",
-  "version": "2.0.0-alpha.4",
+  "version": "2.0.0-alpha.5",
   "description": "untool core",
@@ -21,3 +21,3 @@ "repository": {
     "check-error": "^1.0.2",
-    "cosmiconfig": "^5.2.1",
+    "cosmiconfig": "^6.0.0",
     "debug": "^4.1.1",
@@ -35,5 +35,5 @@ "dotenv": "^8.1.0",
   "engines": {
-    "node": ">8.6.0"
+    "node": "^10.13 || ^12.13"
   },
-  "gitHead": "eebc0b13d754a45aee7344a8f08936c839851b30"
+  "gitHead": "1e02b93e4ee6e79d60759edc5891599ddb9bd9ea"
 }

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

New author

Supply chain risk

A new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 2 instances in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

46465

increased by23.63%

Number of package files

28

increased by180%

Lines of code

587

increased by84.01%

Worsened metrics

Number of low supply chain risk alerts

5

increased by66.67%

Number of medium supply chain risk alerts

1

increased byInfinity%

Dependency changes

• + Added@babel/code-frame@7.26.2(transitive)

• + Added@babel/helper-validator-identifier@7.25.9(transitive)

• + Added@types/parse-json@4.0.2(transitive)

• + Addedcallsites@3.1.0(transitive)

• + Addedcosmiconfig@6.0.0(transitive)

• + Addedimport-fresh@3.3.0(transitive)

• + Addedjs-tokens@4.0.0(transitive)

• + Addedjson-parse-even-better-errors@2.3.1(transitive)

• + Addedlines-and-columns@1.2.4(transitive)

• + Addedparent-module@1.0.1(transitive)

• + Addedparse-json@5.2.0(transitive)

• + Addedpath-type@4.0.0(transitive)

• + Addedpicocolors@1.1.1(transitive)

• + Addedresolve-from@4.0.0(transitive)

• + Addedyaml@1.10.2(transitive)

• - Removedargparse@1.0.10(transitive)

• - Removedcaller-callsite@2.0.0(transitive)

• - Removedcaller-path@2.0.0(transitive)

• - Removedcallsites@2.0.0(transitive)

• - Removedcosmiconfig@5.2.1(transitive)

• - Removedesprima@4.0.1(transitive)

• - Removedimport-fresh@2.0.0(transitive)

• - Removedis-directory@0.3.1(transitive)

• - Removedjs-yaml@3.14.1(transitive)

• - Removedjson-parse-better-errors@1.0.2(transitive)

• - Removedparse-json@4.0.0(transitive)

• - Removedresolve-from@3.0.0(transitive)

• - Removedsprintf-js@1.0.3(transitive)

• Updatedcosmiconfig@^6.0.0