coffeelint - npm Package Compare versions

Comparing version 1.15.0 to 1.15.1

.package.json

 {
   "name": "coffeelint",
   "description": "Lint your CoffeeScript",
-  "version": "1.15.0",
+  "version": "1.15.1",
   "homepage": "http://www.coffeelint.org",
@@ -25,5 +25,7 @@ "keywords": [
   "dependencies": {
-    "coffee-script": "^1.9.1",
+    "browserify": "~8.1.0",
+    "coffee-script": "~1.10.0",
+    "coffeeify": "~1.0.0",
     "glob": "^4.0.0",
-    "ignore": "^2.2.15",
+    "ignore": "^3.0.9",
     "optimist": "^0.6.1",
@@ -46,2 +48,3 @@ "resolve": "^0.6.3",
     "publish": "cake publish",
+    "install": "cake install",
     "lint": "cake compile && ./bin/coffeelint .",
@@ -52,2 +55,2 @@ "lint-csv": "cake compile && ./bin/coffeelint --csv .",
   }
-}
+}

lib/commandline.js

@@ -85,3 +85,5 @@
     }
-    return files;
+    return files.map(function(p) {
+      return path.join(p);
+    });
   };
@@ -118,3 +120,3 @@
       jsonIndentation = text.split('\n')[1].match(/^\s+/)[0].length;
-    } catch (_error) {}
+    } catch (undefined) {}
     return JSON.parse(stripComments(text));
@@ -175,3 +177,3 @@ };
     SelectedReporter = (ref = coreReporters[strReporter]) != null ? ref : (function() {
-      var reporterPath;
+      var error, reporterPath;
       try {
@@ -181,3 +183,3 @@ reporterPath = resolve(strReporter, {
         });
-      } catch (_error) {
+      } catch (error) {
         reporterPath = strReporter;
@@ -250,3 +252,5 @@ }
       scripts = findCoffeeScripts(paths, options.argv.ext);
-      scripts = ignore().addIgnoreFile('.coffeelintignore').filter(scripts);
+      if (fs.existsSync('.coffeelintignore')) {
+        scripts = ignore().add(fs.readFileSync('.coffeelintignore').toString()).filter(scripts);
+      }
       errorReport = lintFiles(scripts, config, options.argv.literate);
@@ -253,0 +257,0 @@ reportAndExit(errorReport, options);

lib/configfinder.js

@@ -46,7 +46,7 @@
   loadJSON = function(filename) {
-    var e;
+    var e, error;
     try {
       return JSON.parse(stripComments(fs.readFileSync(filename).toString()));
-    } catch (_error) {
-      e = _error;
+    } catch (error) {
+      e = error;
       process.stderr.write("Could not load JSON file '" + filename + "': " + e);
@@ -53,0 +53,0 @@ return null;

lib/ruleLoader.js

@@ -16,9 +16,9 @@ (function() {
         return require(rulePath);
-      } catch (_error) {}
+      } catch (undefined) {}
       try {
         return require(moduleName);
-      } catch (_error) {}
+      } catch (undefined) {}
       try {
         return require(path.resolve(process.cwd(), moduleName));
-      } catch (_error) {}
+      } catch (undefined) {}
       return require(moduleName);
@@ -38,3 +38,3 @@ },
     loadRule: function(coffeelint, moduleName, ruleName) {
-      var e, i, len, results, rule, ruleModule;
+      var e, error, i, len, results, rule, ruleModule;
       if (ruleName == null) {
@@ -55,4 +55,4 @@ ruleName = void 0;
         }
-      } catch (_error) {
-        e = _error;
+      } catch (error) {
+        e = error;
         console.error("Error loading " + moduleName);
@@ -59,0 +59,0 @@ throw e;

package.json

 {
   "name": "coffeelint",
   "description": "Lint your CoffeeScript",
-  "version": "1.15.0",
+  "version": "1.15.1",
   "homepage": "http://www.coffeelint.org",
@@ -25,5 +25,5 @@ "keywords": [
   "dependencies": {
-    "coffee-script": "^1.9.1",
+    "coffee-script": "~1.10.0",
     "glob": "^4.0.0",
-    "ignore": "^2.2.15",
+    "ignore": "^3.0.9",
     "optimist": "^0.6.1",
@@ -30,0 +30,0 @@ "resolve": "^0.6.3",

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Install scripts

Supply chain risk

Install scripts are run when the package is installed. The majority of malware in npm is hidden in install scripts.

Found 1 instance in 1 package

Deprecated

Maintenance

The maintainer of the package marked it as deprecated. This could indicate that a single version should not be used, or that the package is no longer maintained and any new vulnerabilities will not be fixed.

Found 1 instance in 1 package

Major refactor

Supply chain risk

Package has recently undergone a major refactor. It may be unstable or indicate significant internal changes. Use caution when updating to versions that include significant changes.

Found 1 instance in 1 package

Shell access

Supply chain risk

This module accesses the system shell. Accessing the system shell increases the risk of executing arbitrary code.

Found 1 instance in 1 package

Uses eval

Supply chain risk

Package uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Found 2 instances in 1 package

Debug access

Supply chain risk

Uses debug, reflection and dynamic code execution features.

Found 3 instances in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Major refactor

Supply chain risk

Package has recently undergone a major refactor. It may be unstable or indicate significant internal changes. Use caution when updating to versions that include significant changes.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

597551

increased by119.87%

Number of package files

96

increased by18.52%

Lines of code

11425

increased by216.83%

Worsened metrics

Number of medium maintenance alerts

1

increased byInfinity%

Number of high supply chain risk alerts

1

increased byInfinity%

Number of low supply chain risk alerts

42

increased by55.56%

Number of medium supply chain risk alerts

5

increased by400%

Dependency changes

• + Addedcoffee-script@1.10.0(transitive)

• + Addedignore@3.3.10(transitive)

• - Removedcoffee-script@1.12.7(transitive)

• - Removedignore@2.2.19(transitive)

• Updatedcoffee-script@~1.10.0

• Updatedignore@^3.0.9