fabric8-analytics-lsp-server - npm Package Compare versions

Comparing version 0.4.0 to 0.4.1

package.json

 {
   "name": "fabric8-analytics-lsp-server",
   "description": "LSP Server for Dependency Analytics",
-  "version": "0.4.0",
+  "version": "0.4.1",
   "author": "Pavel Odvody",
@@ -6,0 +6,0 @@ "contributors": [

server.js

@@ -110,2 +110,3 @@ /* --------------------------------------------------------------------------------------------
         this.three_scale_user_token = process.env.THREE_SCALE_USER_TOKEN || "";
+        this.provide_fullstack_action = (process.env.PROVIDE_FULLSTACK_ACTION || "") === "true";
         this.forbidden_licenses = [];
@@ -128,2 +129,10 @@ this.no_crypto = false;
 }
+const fullStackReportAction = {
+    title: "Detailed Vulnerability Report",
+    kind: vscode_languageserver_1.CodeActionKind.QuickFix,
+    command: {
+        command: "extension.fabric8AnalyticsWidgetFullStack",
+        title: "Analytics Report",
+    }
+};
 let DiagnosticsEngines = [consumers_1.SecurityEngine];
@@ -289,2 +298,5 @@ /* Generate summarized notification message for vulnerability analysis */
             codeActions.push(codeAction);
+            if (config.provide_fullstack_action) {
+                codeActions.push(fullStackReportAction);
+            }
         }
@@ -291,0 +303,0 @@ }

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

86432

increased by0.94%

Lines of code

910

increased by1.34%

Worsened metrics

Number of low supply chain risk alerts

7

increased by16.67%

No dependency changes