gh - npm Package Compare versions

Comparing version 0.1.8 to 0.1.9

bin/gh.js

@@ -48,2 +48,3 @@ #!/usr/bin/env node
     operations.push(git.getCurrentBranch);
+    operations.push(base.checkVersion);
     operations.push(base.login);
@@ -50,0 +51,0 @@

lib/base.js

@@ -16,3 +16,4 @@ /*
     prompt = require('cli-prompt'),
-    logger = require('./logger');
+    logger = require('./logger'),
+    updateNotifier = require('update-notifier');
 
@@ -74,2 +75,15 @@ exports.github = new github({
 
+exports.checkVersion = function(opt_callback) {
+    var notifier = updateNotifier({
+        packagePath: '../package',
+        updateCheckInterval: 1000 * 60 * 60 * 24 // 1 day
+    });
+
+    if (notifier.update) {
+        notifier.notify();
+    }
+
+    opt_callback && opt_callback();
+};
+
 exports.find = function(filepath, opt_pattern) {
@@ -76,0 +90,0 @@ return fs.readdirSync(filepath).filter(function(file) {

package.json

 {
     "name": "gh",
     "description": "Github command line tools helps you improve using git and github from the terminal.",
-    "version": "0.1.8",
+    "version": "0.1.9",
     "author": {
@@ -42,3 +42,4 @@ "name": "Eduardo Lundgren",
         "nopt": "2.1.1",
-        "open": "0.0.3"
+        "open": "0.0.3",
+        "update-notifier": "0.1.3"
     },
@@ -45,0 +46,0 @@ "devDependencies": {

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Major refactor

Supply chain risk

Package has recently undergone a major refactor. It may be unstable or indicate significant internal changes. Use caution when updating to versions that include significant changes.

Found 1 instance in 1 package

New author

Supply chain risk

A new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.

Found 1 instance in 1 package

Dynamic require

Supply chain risk

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

236147

increased by320.3%

Number of package files

25

increased by8.7%

Lines of code

4591

increased by254.79%

Worsened metrics

Dependency count

12

increased by9.09%

Number of low supply chain risk alerts

10

increased by11.11%

Number of medium supply chain risk alerts

2

increased byInfinity%

Dependency changes

• + Addedupdate-notifier@0.1.3

• + Addedargparse@0.1.16(transitive)

• + Addedcolors@0.6.2(transitive)

• + Addedconfigstore@0.1.7(transitive)

• + Addedesprima@1.0.4(transitive)

• + Addedgraceful-fs@2.0.3(transitive)

• + Addedjs-yaml@2.1.3(transitive)

• + Addedlodash@2.4.2(transitive)

• + Addedmkdirp@0.3.5(transitive)

• + Addedosenv@0.0.3(transitive)

• + Addedrequest@2.12.0(transitive)

• + Addedsemver@1.1.4(transitive)

• + Addedunderscore@1.7.0(transitive)

• + Addedunderscore.string@2.4.0(transitive)

• + Addedupdate-notifier@0.1.3(transitive)