cli-engine-config - npm Package Compare versions

Comparing version 3.3.1 to 3.4.0

lib/config.js

@@ -99,2 +99,7 @@ 'use strict';
 
+function registry(config) {
+  const env = process.env[envVarKey(config.bin, 'NPM_REGISTRY')];
+  return env || config.pjson['cli-engine'].npmRegistry || 'https://registry.yarnpkg.com';
+}
+
 function commandsDir(config) {
@@ -271,2 +276,5 @@ let commandsDir = config.pjson['cli-engine'].commands;
     },
+    get npmRegistry() {
+      return registry(this);
+    },
     ...existing,
@@ -273,0 +281,0 @@ __cache: {}

package.json

 {
   "name": "cli-engine-config",
   "description": "base cli-engine config objects and interfaces",
-  "version": "3.3.1",
+  "version": "3.4.0",
   "author": "Jeff Dickey @dickeyxxx",
   "bugs": "https://github.com/heroku/cli-engine-config/issues",
   "dependencies": {
-    "debug": "^3.0.1",
-    "fs-extra": "^4.0.1",
+    "debug": "^3.1.0",
+    "fs-extra": "^4.0.2",
     "uuid": "^3.1.0"
@@ -14,3 +14,3 @@ },
     "babel-cli": "^6.26.0",
-    "babel-jest": "^21.0.0",
+    "babel-jest": "^21.2.0",
     "babel-plugin-syntax-object-rest-spread": "^6.13.0",
@@ -20,12 +20,12 @@ "babel-plugin-transform-class-properties": "6.24.1",
     "babel-plugin-transform-flow-strip-types": "6.22.0",
-    "flow-bin": "^0.54.1",
+    "flow-bin": "^0.56.0",
     "flow-copy-source": "^1.2.1",
     "flow-typed": "^2.1.5",
     "husky": "^0.14.3",
-    "jest": "^21.0.1",
-    "lint-staged": "^4.1.2",
+    "jest": "^21.2.1",
+    "lint-staged": "^4.2.3",
     "mock-fs": "^4.4.1",
-    "prettier": "^1.6.1",
+    "prettier": "^1.7.4",
     "remap-istanbul": "^0.9.5",
-    "rimraf": "2.6.1"
+    "rimraf": "2.6.2"
   },
@@ -32,0 +32,0 @@ "engines": {

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Major refactor

Supply chain risk

Package has recently undergone a major refactor. It may be unstable or indicate significant internal changes. Use caution when updating to versions that include significant changes.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

21358

increased by2.66%

Lines of code

257

increased by2.8%

Number of medium supply chain risk alerts

0

decreased by-100%

Worsened metrics

Number of low supply chain risk alerts

10

increased by11.11%

Dependency changes

• Updateddebug@^3.1.0

• Updatedfs-extra@^4.0.2