idb-connector
Advanced tools
Comparing version 1.2.19-beta.0 to 1.2.19
{ | ||
"name": "idb-connector", | ||
"version": "1.2.19-beta.0", | ||
"version": "1.2.19", | ||
"description": "A Node.js DB2 driver for IBM i", | ||
@@ -34,2 +34,6 @@ "homepage": "https://github.com/IBM/nodejs-idb-connector", | ||
"main": "lib/db2a.js", | ||
"files": [ | ||
"src/", | ||
"lib/" | ||
], | ||
"directories": { | ||
@@ -49,3 +53,3 @@ "lib": "lib", | ||
"devDependencies": { | ||
"@release-it/conventional-changelog": "^7.0.0", | ||
"@release-it/conventional-changelog": "^8.0.1", | ||
"bindings": "^1.5.0", | ||
@@ -57,3 +61,3 @@ "chai": "^4.3.6", | ||
"mocha": "^10.1.0", | ||
"release-it": "^16.1.0" | ||
"release-it": "^17.0.3" | ||
}, | ||
@@ -60,0 +64,0 @@ "binary": { |
@@ -122,24 +122,2 @@ # Node.js iDB Connector for IBM i | ||
## Release | ||
To create a new release the developer first needs to run `release.sh` | ||
```sh | ||
./release.sh | ||
``` | ||
This script will create a new release branch, run release-it, push the new branch upstream. | ||
From there the developer needs to: | ||
1) Open a pull request, have it approved by at least 1 reviewer, and merged into the master branch | ||
2) Create a new release and tag from the [GitHub Web UI](https://github.com/IBM/nodejs-idb-connector/releases/new) with the release and tag name matching the version number in package.json. | ||
After the release is created our Jenkins instance will: | ||
1) Build the package | ||
2) Update the GH release with the binary asset | ||
3) Publish the release to NPM | ||
## License | ||
@@ -146,0 +124,0 @@ |
Sorry, the diff of this file is not supported yet
Sorry, the diff of this file is too big to display
Sorry, the diff of this file is not supported yet
Sorry, the diff of this file is not supported yet
Sorry, the diff of this file is not supported yet
Sorry, the diff of this file is not supported yet
Sorry, the diff of this file is not supported yet
Sorry, the diff of this file is not supported yet
License Policy Violation
LicenseThis package is not allowed per your license policy. Review the package's license to ensure compliance.
Found 1 instance in 1 package
License Policy Violation
LicenseThis package is not allowed per your license policy. Review the package's license to ensure compliance.
Found 1 instance in 1 package
Native code
Supply chain riskContains native code (e.g., compiled binaries or shared libraries). Including native code can obscure malicious behavior.
Found 1 instance in 1 package
Environment variable access
Supply chain riskPackage accesses environment variables, which may be a sign of credential stuffing or data theft.
Found 3 instances in 1 package
Filesystem access
Supply chain riskAccesses the file system, and could potentially read sensitive data.
Found 1 instance in 1 package
No v1
QualityPackage is not semver >=1. This means it is not stable and does not support ^ ranges.
Found 1 instance in 1 package
0
1
1
3034552
11
1537
129