global-prefix - npm Package Compare versions

Comparing version 0.1.4 to 0.1.5

index.js

@@ -10,6 +10,6 @@ /*!
 
-var fs = require('fs')
+var homedir = require('homedir-polyfill');
 var path = require('path');
-var osenv = require('osenv');
 var ini = require('ini');
+var fs = require('fs')
 
@@ -22,4 +22,8 @@ var prefix;
   // Start by checking if the global prefix is set by the user
-  var userConfig = path.resolve(osenv.home(), '.npmrc');
-  prefix = readPrefix(userConfig);
+  var home = homedir();
+  if (home) {
+    // homedir() returns undefined if $HOME not set; path.resolve requires strings
+    var userConfig = path.resolve(home, '.npmrc');
+    prefix = readPrefix(userConfig);
+  }
 
@@ -65,6 +69,6 @@ if (!prefix) {
   try {
-    return fs.realpathSync(require('which').sync('npm'))
+    return fs.realpathSync(require('which').sync('npm'));
   } catch (ex) {
   }
-  return false
+  return false;
 }
@@ -71,0 +75,0 @@

package.json

 {
   "name": "global-prefix",
   "description": "Get the npm global path prefix.",
-  "version": "0.1.4",
+  "version": "0.1.5",
   "homepage": "https://github.com/jonschlinkert/global-prefix",
@@ -23,10 +23,11 @@ "author": "Jon Schlinkert (https://github.com/jonschlinkert)",
   "dependencies": {
+    "homedir-polyfill": "^1.0.0",
     "ini": "^1.3.4",
     "is-windows": "^0.2.0",
-    "osenv": "^0.1.3",
-    "which": "^1.2.10"
+    "which": "^1.2.12"
   },
   "devDependencies": {
-    "gulp-format-md": "^0.1.9",
-    "mocha": "^2.5.3"
+    "fs-exists-sync": "^0.1.0",
+    "gulp-format-md": "^0.1.11",
+    "mocha": "^3.2.0"
   },
@@ -64,3 +65,11 @@ "keywords": [
     }
-  }
+  },
+  "contributors": [
+    "Jon Schlinkert <[e-mail]> (http://twitter.com/jonschlinkert)",
+    "Alexandr Bogachev <[e-mail]> (https://github.com/rmbaad)",
+    "JasonChang <[e-mail]> (https://packagist.org/packages/jason-chang)",
+    "Jorrit Schippers (https://www.ncode.nl)",
+    "Mathias Rasmussen (https://github.com/mathiasvr)",
+    "Charlike Mike Reagent (http://i.am.charlike.online)"
+  ]
 }

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

New author

Supply chain risk

A new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

No README

Quality

Package does not have a README. This may indicate a failed publish or a low quality package.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

7914

increased by90.1%

Number of package files

4

increased by33.33%

Lines of code

72

increased by5.88%

Number of medium quality alerts

0

decreased by-100%

Number of lines in readme file

76

increased byInfinity%

Worsened metrics

Dev dependency count

3

increased by50%

Number of medium supply chain risk alerts

1

increased byInfinity%

Dependency changes

• + Addedhomedir-polyfill@^1.0.0

• + Addedhomedir-polyfill@1.0.3(transitive)

• + Addedparse-passwd@1.0.0(transitive)

• - Removedosenv@^0.1.3

• - Removedos-homedir@1.0.2(transitive)

• - Removedos-tmpdir@1.0.2(transitive)

• - Removedosenv@0.1.5(transitive)

• Updatedwhich@^1.2.12