component-set - npm Package Compare versions

Comparing version 0.2.1 to 0.2.2

bin/utils.js

@@ -15,8 +15,7 @@
 		return exports.latest(m[1], m[2]).then(function(tag){
-			if (tag == 'master') tag = '*'
-			return [key, tag]
+			return [key, tag || '*']
 		})
-	} else {
-		throw new Error('search not implemented')
 	}
+
+	throw new Error('search not implemented')
 }
@@ -26,6 +25,3 @@
 	log.info('fetching', 'latest tag for %s/%s', user, repo)
-	return ghtag(user, repo).then(null, function(e){
-		log.info('error', 'unable to find the latest tag for %s/%s (%s)', user, repo, e.message)
-		return 'master'
-	})
+	return ghtag(user, repo)
 }
@@ -40,3 +36,3 @@
  * add an entry to the component.json file
- * 
+ *
  * @param {String} key
@@ -43,0 +39,0 @@ * @param {String} url

package.json

 {
   "name": "component-set",
-  "version": "0.2.1",
+  "version": "0.2.2",
   "description": "add dependencies to component.json",
@@ -25,4 +25,4 @@ "bin": {
     "foreach": "http://github.com/jkroso/forEach/tarball/0.8.7",
-    "github-latest": "http://github.com/jkroso/github-latest/tarball/0.2.1"
+    "github-latest": "http://github.com/jkroso/github-latest/tarball/0.3.0"
   }
-}
+}

New alerts

HTTP dependency

Supply chain risk

Contains a dependency which resolves to a remote HTTP URL which could be used to inject untrusted code and reduce overall package reliability.

Found 1 instance in 1 package

Fixed alerts

HTTP dependency

Supply chain risk

Contains a dependency which resolves to a remote HTTP URL which could be used to inject untrusted code and reduce overall package reliability.

Found 1 instance in 1 package

Worsened metrics

Total package byte prevSize

41304

decreased by-0.41%

Number of package files

9

decreased by-10%

Lines of code

149

decreased by-3.25%

Dependency changes

• Updatedgithub-latest@http://github.com/jkroso/github-latest/tarball/0.3.0