@xiaobai-world/upload - npm Package Compare versions

Comparing version 0.0.71 to 0.0.72

package.json

 {
   "name": "@xiaobai-world/upload",
-  "version": "0.0.71",
+  "version": "0.0.72",
   "description": "upload to xiaobai store",
@@ -5,0 +5,0 @@ "main": "./src/index.js",

src/upload.js

@@ -127,3 +127,3 @@ #!/usr/bin/env node
   // npm run build
-  const cmd = `npm run build -- --logLevel=all --manifest --base=${pathRes.data}/`;
+  const cmd = `npm run build -- --logLevel=all --manifest --base=${process.env.xiaobai_base || ''}${pathRes.data}/`;
   console.log("cmd is:", cmd);
@@ -130,0 +130,0 @@ const execRes = execSync(cmd, {

New alerts

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

9555

increased by0.35%

Worsened metrics

Number of low supply chain risk alerts

10

increased by11.11%

No dependency changes