Comparing version 1.0.4 to 1.0.5
@@ -11,9 +11,7 @@ 'use strict'; | ||
function _defineProperty(obj, key, value) { if (key in obj) { Object.defineProperty(obj, key, { value: value, enumerable: true, configurable: true, writable: true }); } else { obj[key] = value; } return obj; } | ||
var _crossSpawnAsync = require('cross-spawn-async'); | ||
var _managePathDistGetPathVar = require('manage-path/dist/get-path-var'); | ||
var _lodashAssign = require('lodash.assign'); | ||
var _managePathDistGetPathVar2 = _interopRequireDefault(_managePathDistGetPathVar); | ||
var _lodashAssign2 = _interopRequireDefault(_lodashAssign); | ||
@@ -40,3 +38,3 @@ exports['default'] = crossEnv; | ||
var command = undefined; | ||
var envVars = _defineProperty({}, (0, _managePathDistGetPathVar2['default'])(), process.env[(0, _managePathDistGetPathVar2['default'])()]); | ||
var envVars = (0, _lodashAssign2['default'])({}, process.env); | ||
var commandArgs = args.slice(); | ||
@@ -43,0 +41,0 @@ while (commandArgs.length) { |
{ | ||
"name": "cross-env", | ||
"version": "1.0.4", | ||
"version": "1.0.5", | ||
"description": "Run commands that set environment variables across platforms", | ||
@@ -48,2 +48,3 @@ "main": "src/index.js", | ||
"istanbul": "0.3.21", | ||
"manage-path": "2.0.0", | ||
"mocha": "2.3.3", | ||
@@ -68,4 +69,4 @@ "proxyquire": "1.7.2", | ||
"cross-spawn-async": "2.0.0", | ||
"manage-path": "2.0.0" | ||
"lodash.assign": "^3.2.0" | ||
} | ||
} |
import {spawn} from 'cross-spawn-async'; | ||
import getPathVar from 'manage-path/dist/get-path-var'; | ||
import assign from 'lodash.assign'; | ||
export default crossEnv; | ||
@@ -16,3 +16,3 @@ | ||
let command; | ||
const envVars = {[getPathVar()]: process.env[getPathVar()]}; | ||
const envVars = assign({}, process.env); | ||
const commandArgs = args.slice(); | ||
@@ -19,0 +19,0 @@ while (commandArgs.length) { |
@@ -6,2 +6,3 @@ import chai from 'chai'; | ||
import getPathVar from 'manage-path/dist/get-path-var'; | ||
import assign from 'lodash.assign'; | ||
chai.use(sinonChai); | ||
@@ -49,5 +50,5 @@ | ||
expect(proxied['cross-spawn-async'].spawn).to.have.been.calledWith( | ||
'echo', ['hello world'], {stdio: 'inherit', env} | ||
'echo', ['hello world'], {stdio: 'inherit', env: assign({}, process.env, env)} | ||
); | ||
} | ||
}); |
License Policy Violation
LicenseThis package is not allowed per your license policy. Review the package's license to ensure compliance.
Found 1 instance in 1 package
Environment variable access
Supply chain riskPackage accesses environment variables, which may be a sign of credential stuffing or data theft.
Found 1 instance in 1 package
License Policy Violation
LicenseThis package is not allowed per your license policy. Review the package's license to ensure compliance.
Found 1 instance in 1 package
Environment variable access
Supply chain riskPackage accesses environment variables, which may be a sign of credential stuffing or data theft.
Found 1 instance in 1 package
11750
19
7
+ Addedlodash.assign@^3.2.0
+ Addedlodash._baseassign@3.2.0(transitive)
+ Addedlodash._basecopy@3.0.1(transitive)
+ Addedlodash._bindcallback@3.0.1(transitive)
+ Addedlodash._createassigner@3.1.1(transitive)
+ Addedlodash._getnative@3.9.1(transitive)
+ Addedlodash._isiterateecall@3.0.9(transitive)
+ Addedlodash.assign@3.2.0(transitive)
+ Addedlodash.isarguments@3.1.0(transitive)
+ Addedlodash.isarray@3.0.4(transitive)
+ Addedlodash.keys@3.1.2(transitive)
+ Addedlodash.restparam@3.6.1(transitive)
- Removedmanage-path@2.0.0
- Removedmanage-path@2.0.0(transitive)