global-prefix - npm Package Compare versions

Comparing version 1.0.1 to 1.0.2

index.js

@@ -12,3 +12,3 @@ /*!
 var path = require('path');
-var resolve = require('resolve-dir');
+var expand = require('expand-tilde');
 var homedir = require('homedir-polyfill');
@@ -50,3 +50,3 @@ var ini = require('ini');
   if (prefix) {
-    return resolve(prefix);
+    return expand(prefix);
   }
@@ -53,0 +53,0 @@ }

package.json

 {
   "name": "global-prefix",
   "description": "Get the npm global path prefix.",
-  "version": "1.0.1",
+  "version": "1.0.2",
   "homepage": "https://github.com/jonschlinkert/global-prefix",
@@ -33,6 +33,6 @@ "author": "Jon Schlinkert (https://github.com/jonschlinkert)",
   "dependencies": {
+    "expand-tilde": "^2.0.2",
     "homedir-polyfill": "^1.0.1",
     "ini": "^1.3.4",
     "is-windows": "^1.0.1",
-    "resolve-dir": "^1.0.0",
     "which": "^1.2.14"
@@ -39,0 +39,0 @@ },

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

New author

Supply chain risk

A new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Worsened metrics

Number of medium supply chain risk alerts

1

increased byInfinity%

Dependency changes

• + Addedexpand-tilde@^2.0.2

• - Removedresolve-dir@^1.0.0

• - Removedglobal-modules@1.0.0(transitive)

• - Removedresolve-dir@1.0.1(transitive)