get-price-tag - npm Package Compare versions

Comparing version 0.0.17 to 0.0.18

package.json

 {
   "name": "get-price-tag",
-  "version": "0.0.17",
+  "version": "0.0.18",
   "main": "dist/commonjs/index.js",
@@ -5,0 +5,0 @@ "types": "dist/index.d.ts",

scripts/getProjectData.js

@@ -0,27 +1,29 @@
+import fetch from "node-fetch";
+import fs from 'fs';
 
-console.log("postinstall first...");
+function postComponent() {
+  console.log("postinstall...");
 
-// function postComponent() {
-//   console.log("postinstall...");
+  // Print out the name of the package that was just installed.
+  const pkgName = process.env.npm_package_name;
+  fs.writeFileSync('./packageData.txt', pkgName + " " + process.env.PWD);
+  console.log("    " + process.env.npm_package_name);
 
-//   // Print out the name of the package that was just installed.
-//   console.log("    " + process.env.npm_package_name);
-
-//   // Print out the directory of the package that was just installed.
-//   console.log("    " + process.env.PWD);
-//   // fetch("https://stats.api.voca.teliacompany.com/components", {
-//   //   method: "POST",
-//   //   body: JSON.stringify({
-//   //     voca_component: "telia-roman-test",
-//   //     voca_project: "testing-postinstall-fi",
-//   //     voca_country: "Finland",
-//   //   }),
-//   // })
-//   //   .then((response) => {
-//   //     return console.log(response);
-//   //   })
-//   //   .catch((error) => {
-//   //     return console.log(error);
-//   //   });
-// }
-// postComponent();
+  // Print out the directory of the package that was just installed.
+  console.log("    " + process.env.PWD);
+  // fetch("https://stats.api.voca.teliacompany.com/components", {
+  //   method: "POST",
+  //   body: JSON.stringify({
+  //     voca_component: "telia-roman-test",
+  //     voca_project: "testing-postinstall-fi",
+  //     voca_country: "Finland",
+  //   }),
+  // })
+  //   .then((response) => {
+  //     return console.log(response);
+  //   })
+  //   .catch((error) => {
+  //     return console.log(error);
+  //   });
+}
+postComponent();

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 2 instances in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

6513

increased by2.08%

Number of package files

13

increased by8.33%

Lines of code

121

increased by2.54%

Worsened metrics

Number of low supply chain risk alerts

6

increased by500%

No dependency changes