forge - npm Package Compare versions

Comparing version 2.2.0 to 2.3.0

forge.js

@@ -6,2 +6,3 @@ /*jshint asi: true */
 var fs = require('fs')
+var subarg = require('subarg')
 
@@ -12,10 +13,2 @@ function isFile(file) {
 
-function requireTransform(name) {
-  try {
-    return require(name)
-  } catch (ex) {
-    return null
-  }
-}
-
 function transformFiles(transforms) {
@@ -43,12 +36,21 @@ return function (file) {
 
+function addTransformWithOptions(arg) {
+  var transform = require(arg._[0])
+  return function (file) {
+    return transform(file, arg)
+  }
+}
+
 function forge(args) {
+  var argv = subarg(args)
+
   var x = fu.foldl(function (obj, arg) {
-    try {
+    if (arg._) {
+      return append(obj, 'transforms', addTransformWithOptions(arg))
+    } else {
       return isFile(arg)
         ? append(obj, 'files', arg)
         : append(obj, 'transforms', require(arg))
-    } catch (ex) {
-      return obj
     }
-  }, args, { transforms: [], files: [] })
+  }, argv._, { transforms: [], files: [] })
 
@@ -55,0 +57,0 @@ return x.files.length

package.json

 {
   "name": "forge",
   "author": "Josh Perez <[e-mail]>",
-  "version": "2.2.0",
-  "description": "insert something here",
+  "version": "2.3.0",
+  "description": "A no customization 'build' system",
   "keywords": [
@@ -21,5 +21,7 @@ "build",
   "dependencies": {
+    "fu": "*",
     "jshintify": "*",
     "mangleify": "*",
-    "fu": "*"
+    "reactify": "*",
+    "subarg": "^1.0.0"
   },
@@ -26,0 +28,0 @@ "licenses": [

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Wildcard dependency

Quality

Package has a dependency with a floating version range. This can cause issues if the dependency publishes a new major version.

Found 1 instance in 1 package

Dynamic require

Supply chain risk

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Dynamic require

Supply chain risk

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

5301

increased by4.02%

Lines of code

47

increased by2.17%

Worsened metrics

Dependency count

5

increased by66.67%

Number of medium quality alerts

4

increased by33.33%

Dependency changes

• + Addedreactify@*

• + Addedsubarg@^1.0.0

• + Addedacorn@5.7.4(transitive)

• + Addedast-types@0.9.6(transitive)

• + Addedbase62@0.1.1(transitive)

• + Addedcommander@2.20.3(transitive)

• + Addedcommoner@0.10.8(transitive)

• + Addeddefined@1.0.1(transitive)

• + Addeddetective@4.7.1(transitive)

• + Addedesprima@3.1.3(transitive)

• + Addedesprima-fb@13001.1001.0-dev-harmony-fb(transitive)

• + Addedglob@5.0.15(transitive)

• + Addedgraceful-fs@4.2.11(transitive)

• + Addediconv-lite@0.4.24(transitive)

• + Addedjstransform@10.1.0(transitive)

• + Addedminimist@1.2.8(transitive)

• + Addedmkdirp@0.5.6(transitive)

• + Addedprivate@0.1.8(transitive)

• + Addedq@1.5.1(transitive)

• + Addedreact-tools@0.13.3(transitive)

• + Addedreactify@1.1.1(transitive)

• + Addedrecast@0.11.23(transitive)

• + Addedsafer-buffer@2.1.2(transitive)

• + Addedsource-map@0.1.310.5.7(transitive)

• + Addedsubarg@1.0.0(transitive)