Huge News!Announcing our $40M Series B led by Abstract Ventures.Learn More
Socket
Sign inDemoInstall
Socket

audit-app

Package Overview
Dependencies
Maintainers
1
Versions
17
Alerts
File Explorer

Advanced tools

Socket logo

Install Socket

Detect and block malicious and high-risk dependencies

Install

audit-app - npm Package Compare versions

Comparing version 0.5.3 to 0.6.0

lib/sortVulnerabilityPaths.d.ts

11

CHANGELOG.md

@@ -1,3 +0,10 @@

# [Unreleased](https://github.com/G-Rath/audit-app/compare/v0.5.3...HEAD) (YYYY-MM-DD)
# [Unreleased](https://github.com/G-Rath/audit-app/compare/v0.6.0...HEAD) (YYYY-MM-DD)
# [0.6.0](https://github.com/G-Rath/audit-app/compare/v0.5.3...v0.6.0) (2021-07-16)
### Features
- include vulnerable versions in findings when available ([#14][])
- sort the order of vulnerability paths when using the `paths` output ([#13][])
# [0.5.3](https://github.com/G-Rath/audit-app/compare/v0.5.2...v0.5.3) (2021-06-11)

@@ -97,2 +104,4 @@

[#14]: https://github.com/G-Rath/audit-app/pull/14
[#13]: https://github.com/G-Rath/audit-app/pull/13
[#11]: https://github.com/G-Rath/audit-app/pull/11

@@ -99,0 +108,0 @@ [#10]: https://github.com/G-Rath/audit-app/pull/10

@@ -25,2 +25,3 @@ "use strict";

paths: [advisory.dependency],
versions: [],
range: advisory.range,

@@ -35,2 +36,3 @@ severity: advisory.severity,

paths: advisory.findings.reduce((acc, finding) => acc.concat(finding.paths), []),
versions: advisory.findings.map(finding => finding.version),
range: advisory.vulnerable_versions,

@@ -37,0 +39,0 @@ severity: advisory.severity,

10

lib/formatReport.js

@@ -10,2 +10,3 @@ "use strict";

const wrap_ansi_1 = __importDefault(require("wrap-ansi"));
const sortVulnerabilityPaths_1 = require("./sortVulnerabilityPaths");
exports.SupportedReportFormats = [

@@ -93,3 +94,8 @@ 'summary',

],
['Package', finding.name],
[
'Package',
`${finding.name} ${Array.from(new Set(finding.versions))
.map(version => `v${version}`)
.join(', ')}`
],
['Vulnerable range', finding.range],

@@ -134,3 +140,3 @@ ['More info', finding.url]

json: JSON.stringify,
paths: (report) => report.vulnerable.join('\n'),
paths: (report) => sortVulnerabilityPaths_1.sortVulnerabilityPaths(report.vulnerable).join('\n'),
summary: (report) => buildReportSummary(report).join('\n'),

@@ -137,0 +143,0 @@ tables: (report) => [

@@ -40,2 +40,3 @@ export declare type Severity = 'info' | 'low' | 'moderate' | 'high' | 'critical';

paths: string[];
versions: string[];
range: string;

@@ -42,0 +43,0 @@ severity: Severity;

{
"name": "audit-app",
"version": "0.5.3",
"version": "0.6.0",
"description": "A cli tool for auditing apps & packages using their respective package managers.",

@@ -5,0 +5,0 @@ "keywords": [

SocketSocket SOC 2 Logo

Product

  • Package Alerts
  • Integrations
  • Docs
  • Pricing
  • FAQ
  • Roadmap
  • Changelog

Packages

npm

Stay in touch

Get open source security insights delivered straight into your inbox.


  • Terms
  • Privacy
  • Security

Made with ⚡️ by Socket Inc