confortable - npm Package Compare versions

Comparing version 0.2.0 to 0.2.1

confortable.js

 var exists = require('fs').existsSync
-  , path = require('path');
+  , path = require('path')
+  , HOME;
 
 var withinHome = function (dir) {
-  return (path.relative(process.env.HOME, dir).slice(0, 2) !== '..');
+  return (path.relative(HOME, dir).slice(0, 2) !== '..');
 };
 
 var findFromStart = function (name, start) {
+  // set HOME in here, so that tests can monkey-patch process.env.HOME
+  HOME = process.env.HOME || process.env.HOMEDRIVE + process.env.HOMEPATH;
   start = start || process.cwd();
-  var relative = path.relative(process.env.HOME, start)
+  var relative = path.relative(HOME, start)
     , noRelation = (relative === start) // i.e. different drive or undefined HOME
@@ -17,3 +20,3 @@ , isAbove = (relative.slice(0, 2) === '..');
     var startCfg = path.join(start, name)
-      , homeCfg = path.join(process.env.HOME, name);
+      , homeCfg = path.join(HOME, name);
 
@@ -20,0 +23,0 @@ if (exists(startCfg)) {

History.md

@@ -0,1 +1,5 @@
+0.2.1 / 2013-04-10
+==================
+  * Better windows support by using env.HOMEDIR and env.HOMEDRIVE (thanks agsh)
+
 0.2.0 / 2012-10-26
@@ -2,0 +6,0 @@ ==================

package.json

@@ -5,3 +5,3 @@ {
   "description": "Finds the right recursively placed config file",
-  "version": "0.2.0",
+  "version": "0.2.1",
   "repository": {
@@ -20,3 +20,3 @@ "type": "git",
   "scripts": {
-    "test": "tap ./test"
+    "test": "tap ./test/*.js"
   },
@@ -23,0 +23,0 @@ "devDependencies": {

README.md

@@ -31,3 +31,3 @@ # Confortable [![Build Status](https://secure.travis-ci.org/clux/confortable.png)](http://travis-ci.org/clux/confortable)
 ```bash
-$ npm install conf
+$ npm install confortable
 ```
@@ -34,0 +34,0 @@

test/basic.js

@@ -17,3 +17,3 @@ var conf = require('../')
   , join(cwd, name)
-  ]
+  ];
 
@@ -42,3 +42,3 @@ fs.writeFileSync(files[0], "{}");
   , join(cwd, name)
-  ]
+  ];
 
@@ -45,0 +45,0 @@ fs.writeFileSync(files[0], "{}");

New alerts

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 2 instances in 1 package

Improved metrics

Total package byte prevSize

7049

increased by3.71%

Lines of code

85

increased by3.66%

No dependency changes