get-price-tag - npm Package Compare versions

Comparing version 0.0.27 to 0.0.28

package.json

 {
   "name": "get-price-tag",
-  "version": "0.0.27",
+  "version": "0.0.28",
   "main": "dist/commonjs/index.js",
@@ -5,0 +5,0 @@ "types": "dist/index.d.ts",

scripts/getProjectData.js

 import fetch from "node-fetch";
 import path from 'path';
 import { readFileSync, writeFileSync } from "fs";
-const rootDir = path.resolve('./');
+const rootDir = path.resolve(process.env.INIT_CWD);
 
@@ -6,0 +6,0 @@ function postComponent() {

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

6172

increased by0.26%

Worsened metrics

Number of low supply chain risk alerts

4

increased by33.33%

No dependency changes