envinfo - npm Package Compare versions

Comparing version 3.3.0 to 3.4.0

envinfo.js

@@ -150,3 +150,3 @@ #!/usr/bin/env node
 
-      console.log('\x1b[4mPackages:\x1b[0m');
+      console.log('\x1b[4mPackages:\x1b[0m (wanted => installed)');
 
@@ -157,3 +157,12 @@ var devDependencies = packageJson.devDependencies || {};
       var logFunction = function(dep) {
-        if (allDependencies[dep]) console.log('  ' + dep + ': ', allDependencies[dep]);
+        if (allDependencies[dep]) {
+          var wanted = allDependencies[dep];
+          var installed;
+          try {
+            installed = require(process.cwd() + '/node_modules/' + dep + '/package.json').version;
+          } catch (err) {
+            installed = 'Not Installed';
+          }
+          console.log('  ' + dep + ': ' + wanted + ' => ' + installed);
+        }
       };
@@ -160,0 +169,0 @@

package.json

 {
   "name": "envinfo",
-  "version": "3.3.0",
+  "version": "3.4.0",
   "description": "Info about your dev environment for debugging purposes",
@@ -5,0 +5,0 @@ "repository": "https://github.com/tabrindle/envinfo",

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Dynamic require

Supply chain risk

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

56927

increased by0.56%

Lines of code

194

increased by4.86%

Worsened metrics

Number of low supply chain risk alerts

3

increased by50%

No dependency changes