create-react-app - npm Package Compare versions

Comparing version 2.1.5 to 2.1.6

createReactApp.js

@@ -271,6 +271,17 @@ /**
   if (useYarn) {
-    fs.copySync(
-      require.resolve('./yarn.lock.cached'),
-      path.join(root, 'yarn.lock')
-    );
+    let yarnUsesDefaultRegistry = true;
+    try {
+      yarnUsesDefaultRegistry =
+        execSync('yarnpkg config get registry')
+          .toString()
+          .trim() === 'https://registry.yarnpkg.com';
+    } catch (e) {
+      // ignore
+    }
+    if (yarnUsesDefaultRegistry) {
+      fs.copySync(
+        require.resolve('./yarn.lock.cached'),
+        path.join(root, 'yarn.lock')
+      );
+    }
   }
@@ -458,3 +469,3 @@
         knownGeneratedFiles.forEach(fileToMatch => {
-          // This remove all of knownGeneratedFiles.
+          // This removes all knownGeneratedFiles.
           if (file === fileToMatch) {
@@ -461,0 +472,0 @@ console.log(`Deleting generated file... ${chalk.cyan(file)}`);

package.json

 {
   "name": "create-react-app",
-  "version": "2.1.5",
+  "version": "2.1.6",
   "keywords": [
@@ -5,0 +5,0 @@ "react"

New alerts

New author

Supply chain risk

A new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

451915

increased by0.52%

Lines of code

912

increased by1.22%

Worsened metrics

Number of medium supply chain risk alerts

3

increased by50%

No dependency changes