cfpathcheck - npm Package Compare versions

Comparing version 5.0.2 to 5.1.0

CHANGELOG.md

@@ -5,2 +5,36 @@ # Change Log
 
+## [5.1.0] - 2022-10-25
+### Added
+- nodejs v12, v19 test runs
+- eslint redos plugin
+- ls-engines (tests dependency graph for engine compatibility)
+- Renovate bot config
+
+### Updated
+- actions/checkout@v3
+- actions/setup-node@v3
+- github/codeql-action/init@v2
+- github/codeql-action/autobuild@v2
+- github/codeql-action/analyze@v2
+- Minimum supported NodeJS version is now 12.17
+- @snyk/protect@1.1020.0
+- glob@8.0.3
+- @types/chai@4.3.3
+- @types/checkstyle-formatter@1.0.0
+- @types/deep-equal@1.0.1
+- @types/glob@8.0.0
+- @types/minimist@1.2.2
+- @types/mocha@10.0.0
+- chai@4.3.6
+- eslint@8.26.0
+- eslint-config-xo@0.42.0
+- eslint-plugin-import@2.26.0
+- mocha@10.1.0
+- npm-run-all@4.1.5
+- nyc@15.1.0
+- prettier@2.7.1
+
+### Removed
+- nodejs v17 test run
+
 ## [5.0.2] - 2022-03-25
@@ -69,2 +103,57 @@ ### Added
 
+## [4.6.0] - 2022-10-25
+### Added
+- NodsJS 19.x test run
+
+### Updated
+- Minimum supported NodeJS version is now 12.x
+- @snyk/protect@1.1041.0
+- glob@8.0.3
+- minimist@1.2.7
+- @types/chai@4.3.3
+- @types/glob@8.0.0
+- @types/mocha@10.0.0
+- eslint@8.26.0
+- eslint-config-xo@0.42.0
+- ls-engines@0.7.0
+- mocha@10.1.0
+- prettier@2.7.1
+
+### Removed
+- NodeJS v10.x support
+
+## [4.5.0] - 2022-05-03
+### Added
+- dependabot
+- codeql analysis
+- NodeJS 16.x, 18.x test runs
+- @snyk/protect
+- @types/chai
+- @types/checkstyle-formatter
+- @types/deep-equal
+- @types/glob
+- @types/mocha
+- eslint
+- eslint-config-xo
+- eslint-plugin-import
+- ls-engines
+
+### Updated
+- https Semver link
+- bin/{cfpathcheck -> cli/js}
+- {test -> fixtures}/test-template.cfm
+- Various eslint code style issues fixed
+- chai@4.3.6
+- deep-equal@2.0.5
+- minimist@1.2.6
+- mocha@10.0.0
+- prettier@2.6.2
+
+### Removed
+- TravisCI setup
+- DavidDM badges
+- NodeJS 10.x, 13.x, 15.x test runs
+- snyk
+- xo
+
 ## [4.4.0] - 2020-10-20
@@ -370,5 +459,8 @@ ### Added
 
+[5.1.0]: https://github.com/timbeadle/cfpathcheck/compare/5.0.2...5.1.0
 [5.0.2]: https://github.com/timbeadle/cfpathcheck/compare/5.0.1...5.0.2
 [5.0.1]: https://github.com/timbeadle/cfpathcheck/compare/5.0.0...5.0.1
 [5.0.0]: https://github.com/timbeadle/cfpathcheck/compare/4.4.0...5.0.0
+[4.6.0]: https://github.com/timbeadle/cfpathcheck/compare/4.5.0...4.6.0
+[4.5.0]: https://github.com/timbeadle/cfpathcheck/compare/4.4.0...4.5.0
 [4.4.0]: https://github.com/timbeadle/cfpathcheck/compare/4.3.0...4.4.0
@@ -375,0 +467,0 @@ [4.3.0]: https://github.com/timbeadle/cfpathcheck/compare/4.2.0...4.3.0

lib/cfpathcheck.js

@@ -160,2 +160,4 @@ import { readFileSync, existsSync, readdirSync, writeFileSync } from 'fs';
 		// Checks include '$path'; (inside <cfscript>)
+		// @TODO fix vulnerable RegExp
+		// eslint-disable-next-line redos/no-vulnerable
 		const includeMatches = matchAll(line, /\binclude\s['"](?<path>.*\.cfm)['"]/g);
@@ -162,0 +164,0 @@

package.json

@@ -5,3 +5,3 @@ {
   "description": "Check CFML files for correct paths in cfinclude/cfimport tags",
-  "version": "5.0.2",
+  "version": "5.1.0",
   "homepage": "https://github.com/timbeadle/cfpathcheck",
@@ -36,7 +36,8 @@ "author": {
   "engines": {
-    "node": ">=12"
+    "node": ">= 12.17"
   },
   "scripts": {
-    "test": "run-p test:snyk test:lint test:unit",
-    "test:ci": "run-p test:lint test:unit",
+    "test": "run-p test:snyk test:lint test:unit test:engines",
+    "test:ci": "run-p test:lint test:unit test:engines",
+    "test:engines": "ls-engines",
     "test:coverage": "nyc --reporter=lcov npm run test:unit",
@@ -50,3 +51,3 @@ "test:lint": "eslint {bin,lib,test}/*.js",
   "dependencies": {
-    "@snyk/protect": "^1.882.0",
+    "@snyk/protect": "^1.1020.0",
     "chalk": "^5.0.1",
@@ -56,3 +57,3 @@ "checkstyle-formatter": "^1.1.0",
     "deep-equal": "^2.0.5",
-    "glob": "^8.0.1",
+    "glob": "^8.0.3",
     "log-symbols": "^5.1.0",
@@ -62,18 +63,20 @@ "minimist": "^1.2.6"
   "devDependencies": {
-    "@types/chai": "^4.3.1",
-    "@types/checkstyle-formatter": "^1.0.0",
-    "@types/deep-equal": "^1.0.1",
-    "@types/glob": "^7.2.0",
-    "@types/minimist": "^1.2.2",
-    "@types/mocha": "^9.0.0",
-    "chai": "^4.3.4",
-    "eslint": "^8.10.0",
-    "eslint-config-xo": "^0.40.0",
-    "eslint-plugin-import": "^2.25.4",
-    "mocha": "^9.1.3",
-    "npm-run-all": "^4.1.5",
-    "nyc": "^15.1.0",
-    "prettier": "^2.6.1"
+    "@types/chai": "4.3.3",
+    "@types/checkstyle-formatter": "1.0.0",
+    "@types/deep-equal": "1.0.1",
+    "@types/glob": "8.0.0",
+    "@types/minimist": "1.2.2",
+    "@types/mocha": "10.0.0",
+    "chai": "4.3.6",
+    "eslint": "8.26.0",
+    "eslint-config-xo": "0.42.0",
+    "eslint-plugin-import": "2.26.0",
+    "eslint-plugin-redos": "4.4.1",
+    "ls-engines": "0.7.0",
+    "mocha": "10.1.0",
+    "npm-run-all": "4.1.5",
+    "nyc": "15.1.0",
+    "prettier": "2.7.1"
   },
   "snyk": true
 }

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Deprecated

Maintenance

The maintainer of the package marked it as deprecated. This could indicate that a single version should not be used, or that the package is no longer maintained and any new vulnerabilities will not be fixed.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

967904

increased by3234.5%

Number of package files

15

increased by15.38%

Lines of code

337

increased by2.43%

Worsened metrics

Dev dependency count

16

increased by14.29%

Number of medium maintenance alerts

1

increased byInfinity%

Dependency changes

• Updated@snyk/protect@^1.1020.0

• Updatedglob@^8.0.3