create-treble-app - npm Package Compare versions

Comparing version 0.0.32 to 0.0.33

package.json

 {
   "name": "create-treble-app",
-  "version": "0.0.32",
+  "version": "0.0.33",
   "main": "index.js",
@@ -5,0 +5,0 @@ "license": "MIT",

src/createTrebleApp.js

@@ -136,3 +136,3 @@ import spawn from 'cross-spawn';
   if (name === '.') {
-    const packageJson = require('./package.json');
+    const packageJson = require(path.join(root, 'package.json'));
     name = packageJson.name;
@@ -139,0 +139,0 @@ } else {

New alerts

Dynamic require

Supply chain risk

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

4892

increased by0.31%

Worsened metrics

Number of low supply chain risk alerts

3

increased by50%

No dependency changes