cli-engine-heroku - npm Package Compare versions

Comparing version 7.0.1 to 7.0.2

package.json

 {
   "name": "cli-engine-heroku",
   "description": "heroku specific functionality for the cli-engine",
-  "version": "7.0.1",
+  "version": "7.0.2",
   "author": "Jeff Dickey @jdxcode",
   "bugs": "https://github.com/heroku/cli-engine-heroku/issues",
   "dependencies": {
-    "cli-ux": "^2.0.9",
+    "cli-ux": "^2.0.10",
     "heroku-client": "3.0.4",
@@ -17,5 +17,5 @@ "http-call": "^4.0.5",
     "@types/node": "8.5.1",
-    "cli-engine-command": "11.0.2",
-    "cli-engine-config": "5.0.2",
-    "cli-flags": "2.0.1",
+    "cli-engine-command": "11.0.3",
+    "cli-engine-config": "5.0.3",
+    "cli-flags": "^2.0.2",
     "del-cli": "1.1.0",
@@ -54,3 +54,3 @@ "husky": "0.14.3",
     "pretest": "tsc",
-    "prune": "del-cli \"lib/**/*\\.test\\.(d.ts|js)\"",
+    "prune": "del-cli 'lib/**/*.test.+(d.ts|js)'",
     "test": "jest"
@@ -57,0 +57,0 @@ },

Fixed alerts

Shell access

Supply chain risk

This module accesses the system shell. Accessing the system shell increases the risk of executing arbitrary code.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 1 instance in 1 package

Improved metrics

Number of low supply chain risk alerts

11

decreased by-62.07%

Number of medium supply chain risk alerts

11

decreased by-21.43%

Worsened metrics

Total package byte prevSize

28713

decreased by-44.8%

Number of package files

32

decreased by-40.74%

Lines of code

830

decreased by-44.26%

Dependency changes

• Updatedcli-ux@^2.0.10