@vltpkg/graph - npm Package Compare versions

Comparing version 0.0.0-3 to 0.0.0-4

package.json

 {
   "name": "@vltpkg/graph",
   "description": "A library that helps understanding & expressing what happens on an install",
-  "version": "0.0.0-3",
+  "version": "0.0.0-4",
   "repository": {
@@ -26,17 +26,17 @@ "type": "git",
     "promise-call-limit": "^3.0.2",
-    "@vltpkg/dep-id": "0.0.0-3",
-    "@vltpkg/error-cause": "0.0.0-3",
-    "@vltpkg/package-info": "0.0.0-3",
-    "@vltpkg/output": "0.0.0-3",
-    "@vltpkg/fast-split": "0.0.0-3",
-    "@vltpkg/pick-manifest": "0.0.0-3",
-    "@vltpkg/package-json": "0.0.0-3",
-    "@vltpkg/registry-client": "0.0.0-3",
-    "@vltpkg/rollback-remove": "0.0.0-3",
-    "@vltpkg/run": "0.0.0-3",
-    "@vltpkg/satisfies": "0.0.0-3",
-    "@vltpkg/semver": "0.0.0-3",
-    "@vltpkg/types": "0.0.0-3",
-    "@vltpkg/workspaces": "0.0.0-3",
-    "@vltpkg/spec": "0.0.0-3"
+    "@vltpkg/error-cause": "0.0.0-4",
+    "@vltpkg/dep-id": "0.0.0-4",
+    "@vltpkg/fast-split": "0.0.0-4",
+    "@vltpkg/package-info": "0.0.0-4",
+    "@vltpkg/package-json": "0.0.0-4",
+    "@vltpkg/pick-manifest": "0.0.0-4",
+    "@vltpkg/output": "0.0.0-4",
+    "@vltpkg/registry-client": "0.0.0-4",
+    "@vltpkg/rollback-remove": "0.0.0-4",
+    "@vltpkg/run": "0.0.0-4",
+    "@vltpkg/semver": "0.0.0-4",
+    "@vltpkg/satisfies": "0.0.0-4",
+    "@vltpkg/spec": "0.0.0-4",
+    "@vltpkg/workspaces": "0.0.0-4",
+    "@vltpkg/types": "0.0.0-4"
   },
@@ -43,0 +43,0 @@ "devDependencies": {

README.md

@@ -5,7 +5,6 @@ ![graph](https://github.com/user-attachments/assets/dfbed9e0-8ef0-4a43-993d-d3e5d1e5ae1d)
 
-This is the graph library responsible for representing the packages that are involved in a given install.
+This is the graph library responsible for representing the packages
+that are involved in a given install.
 
-**[API](#api)**
-·
-**[Usage](#usage)**
+**[API](#api)** · **[Usage](#usage)**
 
@@ -16,10 +15,12 @@ ## API
 
-Recursively loads the `node_modules` folder found at `projectRoot` in order to
-create a graph representation of the current installed packages.
+Recursively loads the `node_modules` folder found at `projectRoot` in
+order to create a graph representation of the current installed
+packages.
 
 ### `async ideal.build({ projectRoot: string }): Promise<Graph>`
 
-This method returns a new `Graph` object, reading from the `package.json`
-file located at `projectRoot` dir and building up the graph representation
-of nodes and edges from the files read from the local file system.
+This method returns a new `Graph` object, reading from the
+`package.json` file located at `projectRoot` dir and building up the
+graph representation of nodes and edges from the files read from the
+local file system.
 
@@ -32,5 +33,5 @@ ### `lockfile.load({ mainManifest: Manifest, projectRoot: string }): Graph`
 
-Here's a quick example of how to use the `@vltpkg/graph.ideal.build` method to
-build a graph representation of the install defined at the `projectRoot`
-directory.
+Here's a quick example of how to use the `@vltpkg/graph.ideal.build`
+method to build a graph representation of the install defined at the
+`projectRoot` directory.
 
@@ -37,0 +38,0 @@ ```

New alerts

Network access

Supply chain risk

This module accesses the network.

Found 1 instance in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 2 instances in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

Fixed alerts

Network access

Supply chain risk

This module accesses the network.

Found 1 instance in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 2 instances in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

Improved metrics

Number of lines in readme file

40

2.56%

Number of medium supply chain risk alerts

1

-50%

Dependency changes

• + Added

  @vltpkg/cache@0.0.0-4
  (transitive)

• + Added

  @vltpkg/cache-unzip@0.0.0-4
  (transitive)

• + Added

  @vltpkg/dep-id@0.0.0-4
  (transitive)

• + Added

  @vltpkg/error-cause@0.0.0-4
  (transitive)

• + Added

  @vltpkg/fast-split@0.0.0-4
  (transitive)

• + Added

  @vltpkg/git@0.0.0-4
  (transitive)

• + Added

  @vltpkg/git-scp-url@0.0.0-4
  (transitive)

• + Added

  @vltpkg/keychain@0.0.0-4
  (transitive)

• + Added

  @vltpkg/output@0.0.0-4
  (transitive)

• + Added

  @vltpkg/package-info@0.0.0-4
  (transitive)

• + Added

  @vltpkg/package-json@0.0.0-4
  (transitive)

• + Added

  @vltpkg/pick-manifest@0.0.0-4
  (transitive)

• + Added

  @vltpkg/promise-spawn@0.0.0-4
  (transitive)

• + Added

  @vltpkg/registry-client@0.0.0-4
  (transitive)

• + Added

  @vltpkg/rollback-remove@0.0.0-4
  (transitive)

• + Added

  @vltpkg/run@0.0.0-4
  (transitive)

• + Added

  @vltpkg/satisfies@0.0.0-4
  (transitive)

• + Added

  @vltpkg/semver@0.0.0-4
  (transitive)

• + Added

  @vltpkg/spec@0.0.0-4
  (transitive)

• + Added

  @vltpkg/tar@0.0.0-4
  (transitive)

• + Added

  @vltpkg/types@0.0.0-4
  (transitive)

• + Added

  @vltpkg/url-open@0.0.0-4
  (transitive)

• + Added

  @vltpkg/which@0.0.0-4
  (transitive)

• + Added

  @vltpkg/workspaces@0.0.0-4
  (transitive)

• + Added

  @vltpkg/xdg@0.0.0-4
  (transitive)

• - Removed

  @vltpkg/cache@0.0.0-3
  (transitive)

• - Removed

  @vltpkg/cache-unzip@0.0.0-3
  (transitive)

• - Removed

  @vltpkg/dep-id@0.0.0-3
  (transitive)

• - Removed

  @vltpkg/error-cause@0.0.0-3
  (transitive)

• - Removed

  @vltpkg/fast-split@0.0.0-3
  (transitive)

• - Removed

  @vltpkg/git@0.0.0-3
  (transitive)

• - Removed

  @vltpkg/git-scp-url@0.0.0-3
  (transitive)

• - Removed

  @vltpkg/keychain@0.0.0-3
  (transitive)

• - Removed

  @vltpkg/output@0.0.0-3
  (transitive)

• - Removed

  @vltpkg/package-info@0.0.0-3
  (transitive)

• - Removed

  @vltpkg/package-json@0.0.0-3
  (transitive)

• - Removed

  @vltpkg/pick-manifest@0.0.0-3
  (transitive)

• - Removed

  @vltpkg/promise-spawn@0.0.0-3
  (transitive)

• - Removed

  @vltpkg/registry-client@0.0.0-3
  (transitive)

• - Removed

  @vltpkg/rollback-remove@0.0.0-3
  (transitive)

• - Removed

  @vltpkg/run@0.0.0-3
  (transitive)

• - Removed

  @vltpkg/satisfies@0.0.0-3
  (transitive)

• - Removed

  @vltpkg/semver@0.0.0-3
  (transitive)

• - Removed

  @vltpkg/spec@0.0.0-3
  (transitive)

• - Removed

  @vltpkg/tar@0.0.0-3
  (transitive)

• - Removed

  @vltpkg/types@0.0.0-3
  (transitive)

• - Removed

  @vltpkg/url-open@0.0.0-3
  (transitive)

• - Removed

  @vltpkg/which@0.0.0-3
  (transitive)

• - Removed

  @vltpkg/workspaces@0.0.0-3
  (transitive)

• - Removed

  @vltpkg/xdg@0.0.0-3
  (transitive)

• Updated

  @vltpkg/dep-id@0.0.0-4

• Updated

  @vltpkg/error-cause@0.0.0-4

• Updated

  @vltpkg/fast-split@0.0.0-4

• Updated

  @vltpkg/output@0.0.0-4

• Updated

  @vltpkg/package-info@0.0.0-4

• Updated

  @vltpkg/package-json@0.0.0-4

• Updated

  @vltpkg/pick-manifest@0.0.0-4

• Updated

  @vltpkg/registry-client@0.0.0-4

• Updated

  @vltpkg/rollback-remove@0.0.0-4

• Updated

  @vltpkg/run@0.0.0-4

• Updated

  @vltpkg/satisfies@0.0.0-4

• Updated

  @vltpkg/semver@0.0.0-4

• Updated

  @vltpkg/spec@0.0.0-4

• Updated

  @vltpkg/types@0.0.0-4

• Updated

  @vltpkg/workspaces@0.0.0-4