helix-cli - npm Package Compare versions

Comparing version 1.0.0 to 1.0.1

cli.js

 #! /usr/bin/env node
 const { argv } = require('node:process');
-const { parse, format, normalize, dirname } = require('node:path');
+var findup = require('findup-sync');
+const {
+  parse,
+  format,
+  normalize,
+  dirname,
+  path,
+  basename,
+} = require('node:path');
 const { writeFile, mkdir } = require('node:fs/promises');
@@ -25,4 +33,4 @@
 
-const themeConfigPath = format({ root: './', base: 'theme.config.js' });
-const config = require('./theme.config.js');
+const themeConfigPath = findup('theme.config.js');
+const config = require(themeConfigPath);
 const themes = Object.entries(config.themes);
@@ -29,0 +37,0 @@ themes.forEach((theme) => {

package.json

 {
   "name": "helix-cli",
-  "version": "1.0.0",
+  "version": "1.0.1",
   "description": "CLI Tools for the helix component library",
@@ -13,3 +13,6 @@ "main": "cli.js",
   "author": "Alessandro Lettieri",
-  "license": "MIT"
+  "license": "MIT",
+  "dependencies": {
+    "findup-sync": "^5.0.0"
+  }
 }

New alerts

Dynamic require

Supply chain risk

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

1635

increased by6.03%

Lines of code

44

increased by22.22%

Worsened metrics

Dependency count

1

increased byInfinity%

Number of low supply chain risk alerts

2

increased by100%

Dependency changes

• + Addedfindup-sync@^5.0.0

• + Addedbraces@3.0.3(transitive)

• + Addeddetect-file@1.0.0(transitive)

• + Addedexpand-tilde@2.0.2(transitive)

• + Addedfill-range@7.1.1(transitive)

• + Addedfindup-sync@5.0.0(transitive)

• + Addedglobal-modules@1.0.0(transitive)

• + Addedglobal-prefix@1.0.2(transitive)

• + Addedhomedir-polyfill@1.0.3(transitive)

• + Addedini@1.3.8(transitive)

• + Addedis-extglob@2.1.1(transitive)

• + Addedis-glob@4.0.3(transitive)

• + Addedis-number@7.0.0(transitive)

• + Addedis-windows@1.0.2(transitive)

• + Addedisexe@2.0.0(transitive)

• + Addedmicromatch@4.0.7(transitive)

• + Addedparse-passwd@1.0.0(transitive)

• + Addedpicomatch@2.3.1(transitive)

• + Addedresolve-dir@1.0.1(transitive)

• + Addedto-regex-range@5.0.1(transitive)

• + Addedwhich@1.3.1(transitive)