heroku-cli-util - npm Package Compare versions

Comparing version 3.5.1 to 3.5.2

command.js

@@ -12,3 +12,3 @@ 'use strict';
   let opts = {
-    log:    context.debug,
+    debug:  context.debug,
     token:  context.auth.password,
@@ -15,0 +15,0 @@ };

config.js

 'use strict';
 
-let config = require('rc')('heroku', {
-  color:  true
-});
+let fs   = require('fs');
+let path = require('path');
+let _    = require('lodash');
+let ini  = require('ini');
 
+let home = process.env.HOME || process.env.USERPROFILE || '/root';
+let config = {
+  color:  true,
+  home:   home,
+};
+
+try {
+  let p = path.join(home, '.herokurc');
+  let iniConfig = ini.parse(fs.readFileSync(p, 'utf-8'));
+  config = _.assign(config, iniConfig);
+} catch (e) {}
+
 config.host          = process.env.HEROKU_HOST || 'heroku.com';
@@ -8,0 +21,0 @@ config.git_host      = process.env.HEROKU_GIT_HOST || config.host;

package.json

 {
   "name": "heroku-cli-util",
-  "version": "3.5.1",
+  "version": "3.5.2",
   "description": "Set of helpful CLI utilities",
@@ -22,4 +22,3 @@ "main": "index.js",
     "jshint": "*",
-    "mocha": "*",
-    "netrc": "*"
+    "mocha": "*"
   },
@@ -30,6 +29,7 @@ "dependencies": {
     "columnify": "^1.4.1",
-    "heroku-client": "^1.10.0",
+    "heroku-client": "^1.10.1",
+    "ini": "^1.3.3",
     "linewrap": "^0.2.1",
-    "rc": "^1.0.1"
+    "lodash": "^3.8.0"
   }
 }

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 2 instances in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

17243

increased by2%

Dev dependency count

3

decreased by-25%

Lines of code

393

increased by2.88%

Worsened metrics

Dependency count

7

increased by16.67%

Number of low supply chain risk alerts

7

increased by75%

Dependency changes

• + Addedini@^1.3.3

• + Addedlodash@^3.8.0

• + Addedlodash@3.10.1(transitive)

• - Removedrc@^1.0.1

• - Removeddeep-extend@0.6.0(transitive)

• - Removedminimist@1.2.8(transitive)

• - Removedrc@1.2.8(transitive)

• - Removedstrip-json-comments@2.0.1(transitive)

• Updatedheroku-client@^1.10.1