conventional-changelog-eslint - npm Package Compare versions

Comparing version 3.0.4 to 3.0.8

CHANGELOG.md

@@ -6,2 +6,10 @@ # Change Log
 
+## [3.0.8](https://github.com/conventional-changelog/conventional-changelog/compare/conventional-changelog-eslint@3.0.4...conventional-changelog-eslint@3.0.8) (2020-05-08)
+
+**Note:** Version bump only for package conventional-changelog-eslint
+
+
+
+
+
 ## [3.0.3](https://github.com/conventional-changelog/conventional-changelog/compare/conventional-changelog-eslint@3.0.2...conventional-changelog-eslint@3.0.3) (2019-10-02)
@@ -8,0 +16,0 @@

conventional-changelog.js

 'use strict'
 
-const Q = require(`q`)
-const parserOpts = require(`./parser-opts`)
-const writerOpts = require(`./writer-opts`)
+const Q = require('q')
+const parserOpts = require('./parser-opts')
+const writerOpts = require('./writer-opts')
 
@@ -7,0 +7,0 @@ module.exports = Q.all([parserOpts, writerOpts])

conventional-recommended-bump.js

 'use strict'
 
-const parserOpts = require(`./parser-opts`)
+const parserOpts = require('./parser-opts')
 
@@ -5,0 +5,0 @@ module.exports = {

index.js

 'use strict'
-const Q = require(`q`)
-const conventionalChangelog = require(`./conventional-changelog`)
-const parserOpts = require(`./parser-opts`)
-const recommendedBumpOpts = require(`./conventional-recommended-bump`)
-const writerOpts = require(`./writer-opts`)
+const Q = require('q')
+const conventionalChangelog = require('./conventional-changelog')
+const parserOpts = require('./parser-opts')
+const recommendedBumpOpts = require('./conventional-recommended-bump')
+const writerOpts = require('./writer-opts')
 
@@ -8,0 +8,0 @@ module.exports = presetOpts

package.json

 {
   "name": "conventional-changelog-eslint",
-  "version": "3.0.4",
+  "version": "3.0.8",
   "description": "conventional-changelog eslint preset",
@@ -20,3 +20,3 @@ "main": "index.js",
   "engines": {
-    "node": ">=6.9.0"
+    "node": ">=10"
   },
@@ -39,3 +39,3 @@ "license": "ISC",
   },
-  "gitHead": "7c1c8ad819b05c12c7d58c92ac386b45ada6f6a8"
+  "gitHead": "83643c5a0d2c4d7c9ba14cbf990ffbc577a51e8c"
 }

parser-opts.js

@@ -6,5 +6,5 @@ 'use strict'
   headerCorrespondence: [
-    `tag`,
-    `message`
+    'tag',
+    'message'
   ]
 }

writer-opts.js

 'use strict'
 
-const Q = require(`q`)
-const readFile = Q.denodeify(require(`fs`).readFile)
-const resolve = require(`path`).resolve
+const Q = require('q')
+const readFile = Q.denodeify(require('fs').readFile)
+const resolve = require('path').resolve
 
 module.exports = Q.all([
-  readFile(resolve(__dirname, `./templates/template.hbs`), `utf-8`),
-  readFile(resolve(__dirname, `./templates/header.hbs`), `utf-8`),
-  readFile(resolve(__dirname, `./templates/commit.hbs`), `utf-8`)
+  readFile(resolve(__dirname, './templates/template.hbs'), 'utf-8'),
+  readFile(resolve(__dirname, './templates/header.hbs'), 'utf-8'),
+  readFile(resolve(__dirname, './templates/commit.hbs'), 'utf-8')
 ])
@@ -25,3 +25,3 @@ .spread((template, header, commit) => {
     transform: (commit) => {
-      if (!commit.tag || typeof commit.tag !== `string`) {
+      if (!commit.tag || typeof commit.tag !== 'string') {
         return
@@ -34,6 +34,6 @@ }
     },
-    groupBy: `tag`,
-    commitGroupsSort: `title`,
-    commitsSort: [`tag`, `message`]
+    groupBy: 'tag',
+    commitGroupsSort: 'title',
+    commitsSort: ['tag', 'message']
   }
 }

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

New author

Supply chain risk

A new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.

Found 1 instance in 1 package

Dynamic require

Supply chain risk

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

17528

increased by1.42%

Number of low supply chain risk alerts

1

decreased by-91.67%

Number of medium supply chain risk alerts

0

decreased by-100%

No dependency changes