arm-params-merge - npm Package Compare versions

Comparing version 1.0.0 to 2.0.0

package.json

 {
   "name": "arm-params-merge",
-  "version": "1.0.0",
+  "version": "2.0.0",
   "description": "utility to merge arm param file with specified overrides",
@@ -5,0 +5,0 @@ "main": "param-merge.js",

param-merge.js

@@ -10,6 +10,10 @@ 'use strict';
 
+var templateFilename = args[0];
+var parameterFilename = args[1];
+
+util.log('reading template file');
+var template = require(path.resolve(templateFilename));
 util.log('reading parameter file');
-var filename = args[0];
-var fileParams = require(path.resolve(filename));
-var values = args.slice(1);
+var fileParams = require(path.resolve(parameterFilename));
+var values = args.slice(2);
 
@@ -24,3 +28,7 @@ var params = {};
   }
-  params[bits[0].trim()] =  { value: bits[1].trim() };
+  var key = bits[0].trim();
+  var value = bits[1].trim();
+  if(!!template.parameters[key]){
+    params[key] =  { value: value };
+  }
 });
@@ -31,3 +39,3 @@
 util.log('writing output file');
-fs.writeFile(filename, JSON.stringify(fileParams, null, 2), (err) => {
+fs.writeFile(parameterFilename, JSON.stringify(fileParams, null, 2), (err) => {
   if(err){
@@ -34,0 +42,0 @@ util.log(err);

New alerts

Dynamic require

Supply chain risk

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

Found 1 instance in 1 package

Fixed alerts

Dynamic require

Supply chain risk

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

3017

increased by8.21%

Lines of code

34

increased by25.93%

Worsened metrics

Number of low supply chain risk alerts

3

increased by50%

No dependency changes