hg-auto-semver - npm Package Compare versions

Comparing version 1.1.1 to 1.1.2

bin/cli.js

@@ -21,7 +21,9 @@ #!/usr/bin/env node
 function publish(version) {
+    console.log(process.env.HG_USR, process.env.HG_PWD, process.env.NPM_TOKEN);
+
     execSync(`hg commit --config ui.username=[e-mail] -m 'Release v${version}'`);
-    execSync(`hg tag --config ui.username=[e-mail] ${PACKAGE_VERSION} -f`);
+    execSync(`hg tag --config ui.username=[e-mail] ${version} -f`);
 
     execSync(`echo 'strict-ssl=false' > .npmrc`);
-    execSync(`echo '//npm.corp.coveo.com/:_authToken=${env.NPM_TOKEN}' >> .npmrc`);
+    execSync(`echo '//npm.corp.coveo.com/:_authToken=${process.env.NPM_TOKEN}' >> .npmrc`);
     execSync(`echo '@coveo:registry=https://npm.corp.coveo.com/' >> .npmrc`);
@@ -28,0 +30,0 @@

package.json

 {
   "name": "hg-auto-semver",
-  "version": "1.1.1",
+  "version": "1.1.2",
   "description": "Automatically bump versions according to hg parent branch name.",
@@ -5,0 +5,0 @@ "main": "index.js",

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

4371

increased by1.89%

Lines of code

45

increased by2.27%

Worsened metrics

Number of low supply chain risk alerts

6

increased by200%

No dependency changes