assert-env - npm Package Compare versions

Comparing version 0.2.0 to 0.3.0

package.json

 {
   "name": "assert-env",
-  "version": "0.2.0",
+  "version": "0.3.0",
   "description": "Assert that specific environment variables exist.",
@@ -5,0 +5,0 @@ "main": "index.js",

test.js

@@ -25,3 +25,3 @@ 'use strict';
 
-test('assert', function (t) {
+test('throws when missing keys', function (t) {
   process.env.HTTP_LISTEN_PORT = 4242;
@@ -38,1 +38,16 @@
 });
+
+test('does not throw when all keys exist', function (t) {
+  process.env.HTTP_LISTEN_PORT = 4242;
+  process.env.HTTP_LISTEN_HOST = '0.0.0.0';
+
+  var fn = simulate([
+    'HTTP_LISTEN_PORT',
+    'HTTP_LISTEN_HOST'
+  ]);
+
+  assert.doesNotThrow(fn, ReferenceError);
+
+  t.end();
+});
+

New alerts

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 1 instance in 1 package

URL strings

Supply chain risk

Package contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

5236

6.01%

Lines of code

75

15.38%

Worsened metrics

Number of low supply chain risk alerts

5

150%

No dependency changes