bithound - npm Package Compare versions

Comparing version 1.4.0 to 1.5.0

commands/check.js

 var async = require('async');
 var program = require('commander');
 var request = require('request');
+var git = require('git-rev-sync');
 
@@ -25,3 +26,3 @@ function parse (url) {
   if (process.env.TRAVIS) {
-    branch = process.env.TRAVIS_BRANCH;
+    branch = (process.env.TRAVIS_PULL_REQUEST === 'false' ? process.env.TRAVIS_BRANCH : git.branch(process.env.TRAVIS_BUILD_DIR));
     sha = process.env.TRAVIS_COMMIT;
@@ -28,0 +29,0 @@ } else if (process.env.JENKINS_URL) {

package.json

 {
   "name": "bithound",
-  "version": "1.4.0",
+  "version": "1.5.0",
   "description": "Commands for interacting with bitHound: https://bithound.io",
@@ -19,5 +19,6 @@ "repository": {
   "dependencies": {
-    "async": "^1.5.2",
+    "async": "^2.0.0",
     "commander": "^2.8.1",
     "git-origin-url": "^0.3.0",
+    "git-rev-sync": "^1.6.0",
     "open": "0.0.5",
@@ -28,4 +29,4 @@ "request": "^2.67.0"
     "express": "^4.13.3",
-    "semistandard": "^7.0.5",
-    "tap": "^5.2.0"
+    "semistandard": "^8.0.0",
+    "tap": "^6.1.1"
   },
@@ -32,0 +33,0 @@ "preferGlobal": false,

tests/unit/check.js

@@ -12,2 +12,9 @@ var tap = require('tap');
 
+function notFoundCommitOrRepo (err, t, server, stderr) {
+  tap.equal(stderr, 'Repo or commit not found.');
+  tap.equal(err.code, 1);
+  server.close();
+  t.end();
+}
+
 tap.test('A repo must exists', function (t) {
@@ -18,6 +25,3 @@ server.listen(port, function () {
     exec('node bithound check [e-mail]/provider/owner/repo.git --sha sha', { env: env }, function (err, stdout, stderr) {
-      tap.equal(stderr, 'Branch could not be determined.');
-      tap.equal(err.code, 1);
-      server.close();
-      t.end();
+      notFoundCommitOrRepo(err, t, server, stderr);
     });
@@ -32,6 +36,3 @@ });
     exec('node bithound check [e-mail]/provider/owner/repo.git --sha sha --branch branch', { env: env }, function (err, stdout, stderr) {
-      tap.equal(stderr, 'Repo or commit not found.');
-      tap.equal(err.code, 1);
-      server.close();
-      t.end();
+      notFoundCommitOrRepo(err, t, server, stderr);
     });
@@ -38,0 +39,0 @@ });

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 2 instances in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

18481

increased by0.97%

Lines of code

325

increased by0.31%

Worsened metrics

Dependency count

6

increased by20%

Number of low supply chain risk alerts

28

increased by7.69%

Dependency changes

• + Addedgit-rev-sync@^1.6.0

• + Addedasync@2.6.4(transitive)

• + Addedbalanced-match@1.0.2(transitive)

• + Addedbrace-expansion@1.1.11(transitive)

• + Addedconcat-map@0.0.1(transitive)

• + Addedescape-string-regexp@1.0.5(transitive)

• + Addedfs.realpath@1.0.0(transitive)

• + Addedfunction-bind@1.1.2(transitive)

• + Addedgit-rev-sync@1.12.0(transitive)

• + Addedglob@7.2.3(transitive)

• + Addedgraceful-fs@4.1.11(transitive)

• + Addedhasown@2.0.2(transitive)

• + Addedinflight@1.0.6(transitive)

• + Addedinherits@2.0.4(transitive)

• + Addedinterpret@1.4.0(transitive)

• + Addedis-core-module@2.15.1(transitive)

• + Addedlodash@4.17.21(transitive)

• + Addedminimatch@3.1.2(transitive)

• + Addedonce@1.4.0(transitive)

• + Addedpath-is-absolute@1.0.1(transitive)

• + Addedpath-parse@1.0.7(transitive)

• + Addedrechoir@0.6.2(transitive)

• + Addedresolve@1.22.8(transitive)

• + Addedshelljs@0.7.7(transitive)

• + Addedsupports-preserve-symlinks-flag@1.0.0(transitive)

• + Addedwrappy@1.0.2(transitive)

• - Removedasync@1.5.2(transitive)

• Updatedasync@^2.0.0