changelog-version - npm Package Compare versions

Comparing version 1.0.0 to 1.0.1

CHANGELOG.md

@@ -17,2 +17,12 @@ # Changelog
 
+
+
+
+## v1.0.1 - 2017-11-12
+### Fixed
+- Fix package.json path reference
+
+
+
+
 ## v1.0.0 - 2017-11-12
@@ -19,0 +29,0 @@

index.js

@@ -5,9 +5,9 @@ 'use strict'
 const path = require('path')
-const pkgInfo = require('./package.json')
 
 const regexp = /(\n+)(?!<!--)(\n)(## )(\[UNRELEASED])/gi
-const version = 'v' + pkgInfo.version
 const date = new Date().toISOString().replace(/T.*/, '')
 
 const changelogVersion = function (changelogPath) {
+  const pkgInfo = require(path.join(process.cwd(), 'package.json'))
+  const version = 'v' + pkgInfo.version
   changelogPath = changelogPath || path.join(process.cwd(), 'CHANGELOG.md')
@@ -14,0 +14,0 @@

package.json

 {
   "name": "changelog-version",
-  "version": "1.0.0",
+  "version": "1.0.1",
   "description": "Build tool to update CHANGELOG.md file with the version",
@@ -5,0 +5,0 @@ "main": "index.js",

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Dynamic require

Supply chain risk

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

4350

increased by2.4%

Worsened metrics

Number of low supply chain risk alerts

2

increased by100%

No dependency changes