codecov - npm Package Compare versions

Comparing version 3.7.1 to 3.7.2

lib/codecov.js

@@ -23,60 +23,62 @@ var fs = require('fs')
   patterns = (
-    "-type f -name '*coverage.*' " +
-    "-or -name 'nosetests.xml' " +
-    "-or -name 'jacoco*.xml' " +
-    "-or -name 'clover.xml' " +
-    "-or -name 'report.xml' " +
-    "-or -name 'cobertura.xml' " +
-    "-or -name 'luacov.report.out' " +
-    "-or -name 'lcov.info' " +
-    "-or -name '*.lcov' " +
-    "-or -name 'gcov.info' " +
-    "-or -name '*.gcov' " +
-    "-or -name '*.lst' " +
-    "-not -name '*.sh' " +
-    "-not -name '*.data' " +
-    "-not -name '*.py' " +
-    "-not -name '*.class' " +
-    "-not -name '*.xcconfig' " +
-    "-not -name 'Coverage.profdata' " +
-    "-not -name 'phpunit-code-coverage.xml' " +
-    "-not -name 'coverage.serialized' " +
-    "-not -name '*.pyc' " +
-    "-not -name '*.cfg' " +
-    "-not -name '*.egg' " +
-    "-not -name '*.whl' " +
-    "-not -name '*.html' " +
-    "-not -name '*.js' " +
-    "-not -name '*.cpp' " +
-    "-not -name 'coverage.jade' " +
-    "-not -name 'include.lst' " +
-    "-not -name 'inputFiles.lst' " +
-    "-not -name 'createdFiles.lst' " +
-    "-not -name 'coverage.html' " +
-    "-not -name 'scoverage.measurements.*' " +
-    "-not -name 'test_*_coverage.txt' " +
-    "-not -path '*/vendor/*' " +
-    "-not -path '*/htmlcov/*' " +
-    "-not -path '*/home/cainus/*' " +
-    "-not -path '*/virtualenv/*' " +
-    "-not -path '*/js/generated/coverage/*' " +
-    "-not -path '*/.virtualenv/*' " +
-    "-not -path '*/virtualenvs/*' " +
-    "-not -path '*/.virtualenvs/*' " +
-    "-not -path '*/.env/*' " +
-    "-not -path '*/.envs/*' " +
-    "-not -path '*/env/*' " +
-    "-not -path '*/envs/*' " +
-    "-not -path '*/.venv/*' " +
-    "-not -path '*/.venvs/*' " +
-    "-not -path '*/venv/*' " +
-    "-not -path '*/venvs/*' " +
-    "-not -path '*/.git/*' " +
-    "-not -path '*/.hg/*' " +
-    "-not -path '*/.tox/*' " +
-    "-not -path '*/__pycache__/*' " +
-    "-not -path '*/.egg-info*' " +
-    "-not -path '*/$bower_components/*' " +
-    "-not -path '*/node_modules/*' " +
-    "-not -path '*/conftest_*.c.gcov'"
+    '-type f ( ' +
+    '-name *coverage.* ' +
+    '-or -name nosetests.xml ' +
+    '-or -name jacoco*.xml ' +
+    '-or -name clover.xml ' +
+    '-or -name report.xml ' +
+    '-or -name cobertura.xml ' +
+    '-or -name luacov.report.out ' +
+    '-or -name lcov.info ' +
+    '-or -name *.lcov ' +
+    '-or -name gcov.info ' +
+    '-or -name *.gcov ' +
+    '-or -name *.lst ' +
+    ') ' +
+    '-not -name *.sh ' +
+    '-not -name *.data ' +
+    '-not -name *.py ' +
+    '-not -name *.class ' +
+    '-not -name *.xcconfig ' +
+    '-not -name Coverage.profdata ' +
+    '-not -name phpunit-code-coverage.xml ' +
+    '-not -name coverage.serialized ' +
+    '-not -name *.pyc ' +
+    '-not -name *.cfg ' +
+    '-not -name *.egg ' +
+    '-not -name *.whl ' +
+    '-not -name *.html ' +
+    '-not -name *.js ' +
+    '-not -name *.cpp ' +
+    '-not -name coverage.jade ' +
+    '-not -name include.lst ' +
+    '-not -name inputFiles.lst ' +
+    '-not -name createdFiles.lst ' +
+    '-not -name coverage.html ' +
+    '-not -name scoverage.measurements.* ' +
+    '-not -name test_*_coverage.txt ' +
+    '-not -path */vendor/* ' +
+    '-not -path */htmlcov/* ' +
+    '-not -path */home/cainus/* ' +
+    '-not -path */virtualenv/* ' +
+    '-not -path */js/generated/coverage/* ' +
+    '-not -path */.virtualenv/* ' +
+    '-not -path */virtualenvs/* ' +
+    '-not -path */.virtualenvs/* ' +
+    '-not -path */.env/* ' +
+    '-not -path */.envs/* ' +
+    '-not -path */env/* ' +
+    '-not -path */envs/* ' +
+    '-not -path */.venv/* ' +
+    '-not -path */.venvs/* ' +
+    '-not -path */venv/* ' +
+    '-not -path */venvs/* ' +
+    '-not -path */.git/* ' +
+    '-not -path */.hg/* ' +
+    '-not -path */.tox/* ' +
+    '-not -path */__pycache__/* ' +
+    '-not -path */.egg-info* ' +
+    '-not -path */$bower_components/* ' +
+    '-not -path */node_modules/* ' +
+    '-not -path */conftest_*.c.gcov'
   ).split(' ')
@@ -362,6 +364,7 @@ } else {
   try {
-    upload +=
-      execFileSync('git', ['ls-files', '||', 'hg', 'locate'], { cwd: root })
-        .toString()
-        .trim() + '\n<<<<<< network\n'
+    var network = execFileSync('git', ['ls-files'], { cwd: root })
+    if (network === '') {
+      network = execFileSync('hg', ['locate'], { cwd: root })
+    }
+    upload += network.toString().trim() + '\n<<<<<< network\n'
   } catch (err) {
@@ -368,0 +371,0 @@ // not a git/hg dir, emulating git/hg ignore behavior

package.json

 {
   "name": "codecov",
-  "version": "3.7.1",
+  "version": "3.7.2",
   "description": "Uploading report to Codecov: https://codecov.io",
@@ -5,0 +5,0 @@ "main": "index.js",

README.md

@@ -92,5 +92,4 @@ # Codecov NodeJS Uploader
 
-If you're seeing an **HTTP 400 error when uploading reports to S3**, make sure you've updated to at least version 3.7.0. 
+If you're seeing an **HTTP 400 error when uploading reports to S3**, make sure you've updated to at least version 3.7.0.
 
-
 ## Change Log
@@ -120,3 +119,4 @@
 - v3.7.0 Remove the X-Amz-Acl: public-read header
-
-.
+- v3.7.1 Move to execFileSync and security fixes
+- v3.7.2 Fix issue with network and file finding
+  .

New alerts

New author

Supply chain risk

A new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.

Found 1 instance in 1 package

Improved metrics

Lines of code

2037

increased by0.15%

Worsened metrics

Total package byte prevSize

77248

decreased by-4.62%

Number of package files

62

decreased by-11.43%

Number of medium supply chain risk alerts

7

increased by16.67%

No dependency changes