cf-deployment-tracker-client - npm Package Compare versions

Comparing version 0.1.1 to 0.1.2

package.json

 {
   "name": "cf-deployment-tracker-client",
-  "version": "0.1.1",
+  "version": "0.1.2",
   "private": false,
@@ -11,2 +11,3 @@ "main": "tracker.js",
   "dependencies": {
+    "cwd": "^0.10.0",
     "restler": "3.3.0"
@@ -13,0 +14,0 @@ },

README.md

@@ -0,0 +0,0 @@ # Overview

tracker.js

@@ -6,7 +6,14 @@ // Licensed under the Apache 2.0 License. See footer for details.
 var restler = require('restler'),
-    path = require('path');
+    path = require('path'),
+    cwd = require('cwd');
 
 function track() {
-    var pkg = require(path.join(path.dirname(module.parent.filename), 'package.json')),
-        vcapApplication,
+    var pkg = null;
+    try {
+        pkg = require(path.join(cwd(), 'package.json'));
+    }
+    catch(ex) {
+        // package.json could not be loaded from the cwd
+    }
+    var vcapApplication,
         vcapServices;
@@ -18,3 +25,3 @@
 
-    if (vcapApplication) {
+    if ((vcapApplication) && (pkg)) {
         var event = {
@@ -21,0 +28,0 @@ date_sent: new Date().toJSON()

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

New author

Supply chain risk

A new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.

Found 1 instance in 1 package

Dynamic require

Supply chain risk

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

Found 1 instance in 1 package

No contributors or author data

Maintenance

Package does not specify a list of contributors or an author in package.json.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

New author

Supply chain risk

A new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.

Found 1 instance in 1 package

Dynamic require

Supply chain risk

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

Found 1 instance in 1 package

No contributors or author data

Maintenance

Package does not specify a list of contributors or an author in package.json.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

18752

increased by2.96%

Lines of code

71

increased by10.94%

Worsened metrics

Dependency count

2

increased by100%

Dependency changes

• + Addedcwd@^0.10.0

• + Addedcwd@0.10.0(transitive)

• + Addedexpand-tilde@1.2.2(transitive)

• + Addedfind-file-up@0.1.3(transitive)

• + Addedfind-pkg@0.1.2(transitive)

• + Addedfs-exists-sync@0.1.0(transitive)

• + Addedglobal-modules@0.2.3(transitive)

• + Addedglobal-prefix@0.1.5(transitive)

• + Addedhomedir-polyfill@1.0.3(transitive)

• + Addedini@1.3.8(transitive)

• + Addedis-windows@0.2.0(transitive)

• + Addedisexe@2.0.0(transitive)

• + Addedos-homedir@1.0.2(transitive)

• + Addedparse-passwd@1.0.0(transitive)

• + Addedresolve-dir@0.1.1(transitive)

• + Addedwhich@1.3.1(transitive)