fis3-hook-lego - npm Package Compare versions

Comparing version 0.2.14 to 0.2.15

index.js

@@ -49,5 +49,3 @@ /**
                 /(<script\s[^>]*src=["'])([^?#"']+)/g, 
-                function(str) {
-                    var src = RegExp.$2,
-                        before = RegExp.$1;
+                function(str, before, src) {
                     if (src[0] !== '.' && !src.match(/^\w+:/i)) {
@@ -54,0 +52,0 @@ var ret = lookup(src, opts);

lookup.js

@@ -12,13 +12,4 @@ /**
     fs = _.fs,
-    useRootPackage = '',
-    compare = require('compare-version'),
-    path = require('path');
+    compare = require('compare-version');
 
-
-var projRoot       = fis.project.getProjectPath().replace(/\/src$/, '');
-var hasPackageJson = fs.existsSync(path.join(projRoot,'package.json'));
-var packRoot       = hasPackageJson && require(path.join(projRoot,'package.json'));
-
-
-
 module.exports = function(id, opts) {
@@ -28,4 +19,2 @@ var ignore = opts.ignore,
 
-    useRootPackage = opts.useRootPackage;
-
     if (typeof ignore === 'string') {
@@ -104,5 +93,3 @@ ignore = [opts.ignore];
 
-    if (hasPackageJson && useRootPackage && packRoot.lego && packRoot.lego.dependencies && packRoot.lego.dependencies[pkgName]) {
-        ver = packRoot.lego.dependencies[pkgName];
-    } else if (!ver) { // 默认最新
+    if (!ver) { // 默认最新
         versions = fs.readdirSync(_(lego, pkgName)) || [];
@@ -109,0 +96,0 @@

package.json

 {
   "name": "fis3-hook-lego",
-  "version": "0.2.14",
+  "version": "0.2.15",
   "description": "lego 包管理模块查找",
@@ -17,3 +17,3 @@ "keywords": [
     "type": "git",
-    "url": "git+https://github.com/jiangyuan/fis3-hook-lego.git"
+    "url": "https://github.com/jiangyuan/fis3-hook-lego"
   },
@@ -35,43 +35,3 @@ "author": {
     "fis3-hook-commonjs": "^0.1.1"
-  },
-  "gitHead": "6d719562d4c9595896902ba8ca11c50e03124d83",
-  "_id": "fis3-hook-lego@0.2.11",
-  "scripts": {},
-  "_shasum": "b62cb7f3f5ed2f78a2521326e5cb89c61cd8c131",
-  "_from": "fis3-hook-lego@*",
-  "_npmVersion": "2.14.7",
-  "_nodeVersion": "4.2.3",
-  "_npmUser": {
-    "name": "imweb",
-    "email": "[e-mail]"
-  },
-  "dist": {
-    "shasum": "b62cb7f3f5ed2f78a2521326e5cb89c61cd8c131",
-    "tarball": "https://registry.npmjs.org/fis3-hook-lego/-/fis3-hook-lego-0.2.11.tgz"
-  },
-  "maintainers": [
-    {
-      "name": "feix760",
-      "email": "[e-mail]"
-    },
-    {
-      "name": "helondeng",
-      "email": "[e-mail]"
-    },
-    {
-      "name": "imweb",
-      "email": "[e-mail]"
-    },
-    {
-      "name": "jiangyuan",
-      "email": "[e-mail]"
-    }
-  ],
-  "_npmOperationalInternal": {
-    "host": "packages-6-west.internal.npmjs.com",
-    "tmp": "tmp/fis3-hook-lego-0.2.11.tgz_1456281736896_0.9205799507908523"
-  },
-  "directories": {},
-  "_resolved": "https://registry.npmjs.org/fis3-hook-lego/-/fis3-hook-lego-0.2.11.tgz",
-  "readme": "ERROR: No README data found!"
+  }
 }

powerLego.js

 var _ = fis.util,
     fs = _.fs,
     compare = require('compare-version'),
-    root = 'lego_modules',
-    path = require('path');
+    root = 'lego_modules';
 
-var projRoot       = fis.project.getProjectPath().replace(/[\/]src$/, '');
-var hasPackageJson = fs.existsSync(path.join(projRoot,'package.json'));
-var packRoot       = hasPackageJson && require(path.join(projRoot,'package.json'));
 
@@ -20,3 +16,2 @@ module.exports = {
             subFile = match && match[3] || '';
-
         // 做一次快速判断
@@ -33,5 +28,3 @@ if (!pkgName || !getListAll(root)[pkgName]) {
 
-        if (hasPackageJson && opts.useRootPackage && packRoot.lego && packRoot.lego.dependencies && packRoot.lego.dependencies[pkgName]){
-            ver = packRoot.lego.dependencies[pkgName];
-        } else if (!ver) { // 默认最新
+        if (!ver) { // 默认最新
             versions = fs.readdirSync(_(lego, pkgName)) || [];
@@ -38,0 +31,0 @@

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Dynamic require

Supply chain risk

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

Found 1 instance in 1 package

Improved metrics

Number of low supply chain risk alerts

2

decreased by-50%

Worsened metrics

Total package byte prevSize

12389

decreased by-14.97%

Lines of code

271

decreased by-5.57%

No dependency changes