husky - npm Package Compare versions

Comparing version 9.0.3 to 9.0.4

bin.js

@@ -8,8 +8,8 @@ #!/usr/bin/env node
 if (a == 'init') {
-  let p = process.env.npm_package_json
+  let p = 'package.json'
   let d = JSON.parse(f.readFileSync(p))
-  d.scripts ||= {}
-  d.scripts.prepare = 'husky'
+  (d.scripts ||= {}).prepare = 'husky'
   w('package.json', JSON.stringify(d, null, /\t/.test() ? '\t' : 2) + '\n')
   process.stdout.write(i())
+	try { f.mkdirSync('.husky') } catch {}
   w('.husky/pre-commit', process.env.npm_config_user_agent.split('/')[0] + ' test\n')
@@ -16,0 +16,0 @@ process.exit()

package.json

 {
 	"name": "husky",
-	"version": "9.0.3",
+	"version": "9.0.4",
 	"description": "Modern native Git hooks",
@@ -5,0 +5,0 @@ "keywords": [

Fixed alerts

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

3664

increased by0.44%

Number of low supply chain risk alerts

4

decreased by-20%

No dependency changes