codacy-coverage - npm Package Compare versions

Comparing version 3.0.0 to 3.1.0

lib/getGitData.js

@@ -18,3 +18,4 @@ (function (logger, exec, Promise) {
                     process.env.WERCKER_GIT_COMMIT ||
-                    process.env.BUILDKITE_COMMIT;
+                    process.env.BUILDKITE_COMMIT ||
+                    process.env.CI_COMMIT_SHA;
 
@@ -21,0 +22,0 @@ if (gitCommit) {

package.json

 {
   "name": "codacy-coverage",
-  "version": "3.0.0",
+  "version": "3.1.0",
   "description": "Code Coverage reporter for Codacy.com",
@@ -47,3 +47,2 @@ "keywords": [
     "dirty-chai": "^2.x",
-    "nsp": "^3.1.x",
     "mocha": "^4.x",
@@ -57,3 +56,3 @@ "nock": "^9.1.x",
     "lint-style": "eslint .",
-    "lint-dependencies": "nsp check",
+    "lint-dependencies": "npm audit",
     "test": "istanbul cover node_modules/mocha/bin/_mocha -- --check-leaks  --timeout 30000 --reporter spec test/",
@@ -60,0 +59,0 @@ "test-all": "npm run lint-style && npm run lint-dependencies && npm run test"

README.md

@@ -148,2 +148,4 @@ # Node Codacy Coverage
 
+Note: [jest might return exit code 1](https://github.com/facebook/jest/issues/3520) if you defined a coverage threshold and the threshold is not met
+
 ```json
@@ -191,2 +193,7 @@ "scripts": {
 
+### Run in Windows
+
+If you are running coverage in a windows machine without Unix tools,
+you need to change the command to `codacy-coverage < ./test/unit/coverage/lcov.info`.
+
 ## Troubleshooting
@@ -216,2 +223,22 @@
 
+## Options
+
+```bash
+Options:
+
+  -V, --version               output the version number
+  -f, --format [value]        Coverage input format
+  -t, --token [value]         Codacy Project API Token
+  -a, --accountToken [value]  Codacy Account Token
+  -u, --username [value]      Codacy Username/Organization
+  -n, --projectName [value]   Codacy Project Name
+  -c, --commit [value]        Commit SHA hash
+  -l, --language [value       Project Language
+  -e, --endpoint [value]      Codacy API Endpoint
+  -p, --prefix [value]        Project path prefix
+  -v, --verbose               Display verbose output
+  -d, --debug                 Display debug output
+  -h, --help                  output usage information
+```
+
 ## License
@@ -218,0 +245,0 @@

New alerts

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

71669

increased by1.51%

Dev dependency count

8

decreased by-11.11%

Lines of code

1268

increased by0.08%

Number of lines in readme file

267

increased by11.25%

Worsened metrics

Number of low supply chain risk alerts

50

increased by2.04%

No dependency changes