dotenv - npm Package Compare versions

Comparing version 0.0.5 to 0.1.0

lib/main.js

@@ -43,4 +43,4 @@ "use strict";
     load: function() {
+      dotenv._loadEnv();
       dotenv._loadEnvDotEnvironment();
-      dotenv._loadEnv();
 
@@ -47,0 +47,0 @@ return true;

package.json

 {
   "name": "dotenv",
-  "version": "0.0.5",
+  "version": "0.1.0",
   "description": "Loads environment variables from .env",
@@ -5,0 +5,0 @@ "main": "lib/main.js",

test/main.js

@@ -13,3 +13,3 @@ var assert      = require('assert'),
   it('version should be set', function() {
-    result.version.should.eql("0.0.5"); 
+    result.version.should.eql("0.1.0"); 
   });
@@ -44,6 +44,11 @@
 
+    it('overrides any values in .env with .env.environment', function() {
+      process.env.ENVIRONMENT_OVERRIDE.should.eql("development");
+    });
+
     it('reads from a skipped line in .env.development', function() {
       process.env.AFTER_LINE.should.eql("after_line");
     });
+
   });
 });

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

5831

increased by3.83%

Lines of code

82

increased by3.8%

Worsened metrics

Number of low supply chain risk alerts

12

increased by9.09%

No dependency changes