codecov - npm Package Compare versions

Comparing version 3.5.0 to 3.6.0

lib/detect.js

@@ -13,6 +13,8 @@ var services = {
   semaphore: require('./services/semaphore'),
+  semaphore2x: require('./services/semaphore2x'),
   snap: require('./services/snap'),
   gitlab: require('./services/gitlab'),
   heroku: require('./services/heroku'),
-  teamcity: require('./services/teamcity')
+  teamcity: require('./services/teamcity'),
+  codebuild: require('./services/codebuild'),
 }
@@ -19,0 +21,0 @@

lib/services/semaphore.js

 module.exports = {
   detect: function() {
-    return !!process.env.SEMAPHORE
+    return !!process.env.SEMAPHORE && !!process.env.SEMAPHORE_REPO_SLUG
   },
 
   configuration: function() {
-    console.log('    Semaphore CI Detected')
+    console.log('    Semaphore 1.x CI Detected')
     return {
-      service: 'semaphore',
+      service: 'semaphore1x',
       build:
@@ -11,0 +11,0 @@ process.env.SEMAPHORE_BUILD_NUMBER +

package.json

 {
   "name": "codecov",
-  "version": "3.5.0",
+  "version": "3.6.0",
   "description": "Uploading report to Codecov: https://codecov.io",
@@ -5,0 +5,0 @@ "main": "index.js",

README.md

@@ -108,1 +108,2 @@ # Codecov NodeJS Uploader
 - v3.5.0 Added TeamCity support
+- v3.6.0 Added AWS CodeBuild and Semaphore2

test/services/semaphore.test.js

 var semaphore = require('../../lib/services/semaphore')
 
 describe('Semaphore CI Provider', function() {
+  var OLD_ENV = process.env
+
+  beforeEach(function() {
+    process.env = Object.assign({}, OLD_ENV)
+  })
+
+  afterEach(function() {
+    process.env = Object.assign({}, OLD_ENV)
+  })
+
   it('can detect semaphore', function() {
     process.env.SEMAPHORE = 'true'
+    process.env.SEMAPHORE_REPO_SLUG = 'owner/repo'
     expect(semaphore.detect()).toBe(true)
   })
 
+  it('does not detect semaphore 2.x', function() {
+    process.env.SEMAPHORE = 'true'
+    process.env.SEMAPHORE_WORKFLOW_ID = '65c9bb1c-aeb6-41f0-b8d9-6fa177241cdf'
+    expect(semaphore.detect()).toBe(false)
+  })
+
   it('can get semaphore env info', function() {
@@ -16,3 +33,3 @@ process.env.SEMAPHORE_BUILD_NUMBER = '1234'
     expect(semaphore.configuration()).toEqual({
-      service: 'semaphore',
+      service: 'semaphore1x',
       commit: '5678',
@@ -19,0 +36,0 @@ build: '1234.1',

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 10 instances in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Native code

Supply chain risk

Contains native code (e.g., compiled binaries or shared libraries). Including native code can obscure malicious behavior.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

73811

increased by3.42%

Number of package files

60

increased by7.14%

Lines of code

1951

increased by8.27%

Number of lines in readme file

109

increased by0.93%

Number of medium supply chain risk alerts

5

decreased by-16.67%

Worsened metrics

Number of low supply chain risk alerts

235

increased by13.53%

No dependency changes