cli-color - npm Package Compare versions

Comparing version 2.0.0 to 2.0.1

CHANGELOG.md

@@ -5,2 +5,8 @@ # Changelog
 
+### [2.0.1](https://github.com/medikoo/cli-color/compare/v2.0.0...v2.0.1) (2021-10-15)
+
+### Maintenance Improvements
+
+- Drop `ansi-regex` dependency due to security issues ([#38](https://github.com/medikoo/cli-color/issues/38)) ([9072cda](https://github.com/medikoo/cli-color/commit/9072cda305181dcc64d657d4de95a813db6dbdf3)) ([Jorge Cabot](https://github.com/jcabot21))
+
 ## [2.0.0](https://github.com/medikoo/cli-color/compare/v1.4.0...v2.0.0) (2019-10-09)
@@ -7,0 +13,0 @@

columns.js

@@ -13,3 +13,3 @@ "use strict";
 
-module.exports = function (inputRows/*, options*/) {
+module.exports = function (inputRows /*, options*/) {
 	var options = Object(arguments[1])
@@ -16,0 +16,0 @@ , colsMeta = []

package.json

 {
 	"name": "cli-color",
-	"version": "2.0.0",
+	"version": "2.0.1",
 	"description": "Colors, formatting and other tools for the console",
@@ -22,20 +22,24 @@ "author": "Mariusz Nowak <[e-mail]> (http://www.medikoo.com/)",
 	"dependencies": {
-		"ansi-regex": "^2.1.1",
 		"d": "^1.0.1",
-		"es5-ext": "^0.10.51",
+		"es5-ext": "^0.10.53",
 		"es6-iterator": "^2.0.3",
-		"memoizee": "^0.4.14",
+		"memoizee": "^0.4.15",
 		"timers-ext": "^0.1.7"
 	},
 	"devDependencies": {
-		"eslint": "^6.5.1",
-		"eslint-config-medikoo": "^2.6.0",
+		"@commitlint/cli": "^13.2.1",
+		"eslint": "^8.0.1",
+		"eslint-config-medikoo": "^4.1.1",
 		"git-list-updated": "^1.2.1",
-		"husky": "^3.0.8",
-		"lint-staged": "^9.4.2",
-		"prettier-elastic": "^1.18.2",
-		"tad": "^3.0.1"
+		"github-release-from-cc-changelog": "^2.2.0",
+		"husky": "^4.3.8",
+		"lint-staged": "^11.2.3",
+		"nyc": "^15.1.0",
+		"prettier-elastic": "^2.2.1",
+		"standard-version": "^9.3.1",
+		"tad": "^3.1.0"
 	},
 	"husky": {
 		"hooks": {
+			"commit-msg": "commitlint -E HUSKY_GIT_PARAMS",
 			"pre-commit": "lint-staged"
@@ -73,3 +77,4 @@ }
 				"files": [
-					"*.md"
+					"*.md",
+					"*.yml"
 				],
@@ -82,5 +87,51 @@ "options": {
 	},
+	"nyc": {
+		"all": true,
+		"exclude": [
+			".github",
+			"coverage/**",
+			"examples",
+			"test/**",
+			"*.config.js"
+		],
+		"reporter": [
+			"lcov",
+			"html",
+			"text-summary"
+		]
+	},
+	"standard-version": {
+		"skip": {
+			"commit": true,
+			"tag": true
+		},
+		"types": [
+			{
+				"type": "feat",
+				"section": "Features"
+			},
+			{
+				"type": "fix",
+				"section": "Bug Fixes"
+			},
+			{
+				"type": "perf",
+				"section": "Performance Improvements"
+			},
+			{
+				"type": "refactor",
+				"section": "Maintenance Improvements"
+			},
+			{
+				"type": "chore",
+				"section": "Maintenance Improvements"
+			}
+		]
+	},
 	"scripts": {
+		"commitlint": "commitlint -f HEAD@{15}",
+		"coverage": "nyc npm test",
 		"lint": "eslint --ignore-path=.gitignore .",
 		"lint:updated": "pipe-git-updated --ext=js -- eslint --ignore-pattern '!*'",
+		"prepare-release": "standard-version && prettier --write CHANGELOG.md",
 		"prettier-check": "prettier -c --ignore-path .gitignore \"**/*.{css,html,js,json,md,yaml,yml}\"",
@@ -90,5 +141,8 @@ "prettier-check:updated": "pipe-git-updated --ext=css --ext=html --ext=js --ext=json --ext=md --ext=yaml --ext=yml -- prettier -c",
 		"prettify:updated": "pipe-git-updated --ext=css --ext=html --ext=js --ext=json --ext=md --ext=yaml --ext=yml -- prettier --write",
-		"test": "node ./node_modules/tad/bin/tad"
+		"test": "tad"
 	},
+	"engines": {
+		"node": ">=0.10"
+	},
 	"license": "ISC"
 }

README.md

@@ -1,4 +0,3 @@
-[![*nix build status][nix-build-image]][nix-build-url]
-[![Windows build status][win-build-image]][win-build-url]
-![Transpilation status][transpilation-image]
+[![Build status][build-image]][build-url]
+[![Tests coverage][cov-image]][cov-url]
 [![npm version][npm-image]][npm-url]
@@ -690,4 +689,6 @@
   clc.columns([
-    [clc.bold("First Name"), clc.bold("Last Name"), clc.bold("Age")], ["John", "Doe", 34],
-    ["Martha", "Smith", 20], ["Jan", "Kowalski", 30]
+    [clc.bold("First Name"), clc.bold("Last Name"), clc.bold("Age")],
+    ["John", "Doe", 34],
+    ["Martha", "Smith", 20],
+    ["Jan", "Kowalski", 30]
   ])
@@ -754,1 +755,8 @@ );
 </div>
+
+[build-image]: https://github.com/medikoo/cli-color/workflows/Integrate/badge.svg
+[build-url]: https://github.com/medikoo/cli-color/actions?query=workflow%3AIntegrate
+[cov-image]: https://img.shields.io/codecov/c/github/medikoo/cli-color.svg
+[cov-url]: https://codecov.io/gh/medikoo/cli-color
+[npm-image]: https://img.shields.io/npm/v/cli-color.svg
+[npm-url]: https://www.npmjs.com/package/cli-color

slice.js

@@ -0,4 +1,6 @@
+/* eslint max-lines: "off" */
+
 "use strict";
 
-var reAnsi        = require("ansi-regex")
+var reAnsi        = require("./regex-ansi")
   , stringifiable = require("es5-ext/object/validate-stringifiable-value")
@@ -111,3 +113,3 @@ , length        = require("./get-stripped-length")
 
-module.exports = function (str/*, begin, end*/) {
+module.exports = function (str /*, begin, end*/) {
 	var seq, begin = Number(arguments[1]), end = Number(arguments[2]), len;
@@ -114,0 +116,0 @@

strip.js

@@ -6,4 +6,4 @@ // Strip ANSI formatting from string
 var stringifiable = require("es5-ext/object/validate-stringifiable")
-  , r             = require("ansi-regex")();
+  , r             = require("./regex-ansi")();
 
 module.exports = function (str) { return stringifiable(str).replace(r, ""); };

throbber.js

@@ -29,3 +29,3 @@ "use strict";
 
-module.exports = exports = function (write, interval/*, format*/) {
+module.exports = exports = function (write, interval /*, format*/) {
 	var format = arguments[2], token, iterator = new ThrobberIterator();
@@ -32,0 +32,0 @@ callable(write);

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Major refactor

Supply chain risk

Package has recently undergone a major refactor. It may be unstable or indicate significant internal changes. Use caution when updating to versions that include significant changes.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Shell access

Supply chain risk

This module accesses the system shell. Accessing the system shell increases the risk of executing arbitrary code.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 1 instance in 1 package

Improved metrics

Dependency count

5

decreased by-16.67%

Number of lines in readme file

761

increased by1.06%

Number of low supply chain risk alerts

0

decreased by-100%

Worsened metrics

Total package byte prevSize

64885

decreased by-34.26%

Dev dependency count

11

increased by57.14%

Number of package files

24

decreased by-54.72%

Lines of code

583

decreased by-61.67%

Dependency changes

• - Removedansi-regex@^2.1.1

• - Removedansi-regex@2.1.1(transitive)

• Updatedes5-ext@^0.10.53

• Updatedmemoizee@^0.4.15