buildable - npm Package Compare versions

Comparing version 3.0.0 to 3.0.1

LICENSE

+MIT License
+
+Copyright (c) 2020 MoleculerJS
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

dist/package.json

 {
     "name": "buildable",
-    "version": "2.1.10",
+    "version": "3.0.0",
     "description": "Buildable CLI ",
@@ -15,5 +15,5 @@ "main": "dist/src/index.js",
     "dependencies": {
-        "@buildable/pipeline-as-code": "^0.0.4",
-        "@buildable/types": "^0.0.7",
-        "@buildable/utils": "^0.0.9",
+        "@buildable/pipeline-as-code": "^1.0.0",
+        "@buildable/types": "^0.0.8",
+        "@buildable/utils": "^0.0.10",
         "axios": "^1.2.2",
@@ -34,3 +34,3 @@ "commander": "^9.4.1",
     },
-    "gitHead": "02cad9e134a477be55f3794318458138d88930a4"
+    "gitHead": "f446dc41a632d00d4e726cec1f50de03cf3d6988"
 }

package.json

 {
   "name": "buildable",
-  "version": "3.0.0",
+  "version": "3.0.1",
   "description": "Buildable CLI ",
@@ -15,5 +15,5 @@ "main": "dist/src/index.js",
   "dependencies": {
-    "@buildable/pipeline-as-code": "^1.0.0",
-    "@buildable/types": "^0.0.8",
-    "@buildable/utils": "^0.0.10",
+    "@buildable/pipeline-as-code": "^1.0.1",
+    "@buildable/types": "^0.0.9",
+    "@buildable/utils": "^0.0.11",
     "axios": "^1.2.2",
@@ -34,3 +34,3 @@ "commander": "^9.4.1",
   },
-  "gitHead": "f446dc41a632d00d4e726cec1f50de03cf3d6988"
+  "gitHead": "b13ff9d70c60ddbc090a8cc5d9d1c6ab4d242fe8"
 }

New alerts

Dynamic require

Supply chain risk

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 3 instances in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

Mixed license

License

Package contains multiple licenses.

Found 1 instance in 1 package

Fixed alerts

New author

Supply chain risk

A new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.

Found 1 instance in 1 package

Dynamic require

Supply chain risk

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 3 instances in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

20576

5.59%

Number of package files

16

6.67%

Number of medium supply chain risk alerts

0

-100%

Worsened metrics

Number of low license alerts

1

Infinity%

Dependency changes

• + Added

  @buildable/types@0.0.9
  (transitive)

• + Added

  @buildable/utils@0.0.11
  (transitive)

• - Removed

  @buildable/types@0.0.8
  (transitive)

• - Removed

  @buildable/utils@0.0.10
  (transitive)

• Updated

  @buildable/pipeline-as-code@^1.0.1

• Updated

  @buildable/types@^0.0.9

• Updated

  @buildable/utils@^0.0.11