audit-ci - npm Package Compare versions

Comparing version 2.4.1 to 2.4.2

lib/npm-auditer.js

@@ -6,5 +6,14 @@ /*
  */
+const childProcess = require('child_process');
 const { runProgram, reportAudit } = require('./common');
 const Model = require('./Model');
 
+function getAuditCiVersion() {
+  const version = childProcess
+    .execSync('npm show audit-ci version')
+    .toString()
+    .replace('\n', '');
+  return version;
+}
+
 function runNpmAudit(config) {
@@ -43,2 +52,4 @@ const { directory, registry, _npm } = config;
 function printReport(parsedOutput, levels, reportType) {
+  const auditCiVersion = getAuditCiVersion();
+
   function printReportObj(text, obj) {
@@ -48,2 +59,5 @@ console.log('\x1b[36m%s\x1b[0m', text);
   }
+
+  console.log(`audit-ci version: ${auditCiVersion}`);
+
   switch (reportType) {
@@ -50,0 +64,0 @@ case 'full':

lib/yarn-auditer.js

@@ -27,2 +27,9 @@ /*
 
+function getAuditCiVersion() {
+  const version = JSON.parse(
+    childProcess.execSync('yarn info audit-ci version --json')
+  ).data;
+  return version;
+}
+
 function yarnSupportsAudit(yarnVersion) {
@@ -64,2 +71,3 @@ return semver.gte(yarnVersion, MINIMUM_YARN_VERSION);
     const yarnVersion = getYarnVersion();
+    const auditCiVersion = getAuditCiVersion();
     const isYarnVersionSupported = yarnSupportsAudit(yarnVersion);
@@ -72,2 +80,4 @@ if (!isYarnVersionSupported) {
 
+    console.log(`audit-ci version: ${auditCiVersion}`);
+
     if (whitelist.length) {
@@ -74,0 +84,0 @@ console.log(`Modules to whitelist: ${whitelist.join(', ')}.`);

package.json

 {
   "name": "audit-ci",
-  "version": "2.4.1",
+  "version": "2.4.2",
   "description": "Audits npm and yarn projects in CI environments",
@@ -5,0 +5,0 @@ "license": "Apache-2.0",

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

42270

increased by1.38%

Lines of code

664

increased by2.79%

Worsened metrics

Number of medium supply chain risk alerts

2

increased by100%

No dependency changes