init-package-json - npm Package Compare versions

Comparing version 1.10.3 to 2.0.0

CHANGELOG.md

 # Change Log
 
-All notable changes to this project will be documented in this file. See [standard-version](https://github.com/conventional-changelog/standard-version) for commit guidelines.
+<a name="2.0.0"></a>
+## [2.0.0](https://github.com/npm/init-package-json/compare/v1.10.3...v2.0.0) (2020-10-09)
+* BREAKING: requires node10+
+* fix: compat with new `@npmcli/config` module
+* chore: update deps to latest and greatest
 
@@ -5,0 +9,0 @@ <a name="1.10.3"></a>

default-input.js

@@ -73,4 +73,10 @@ var fs = require('fs')
 
+const defaultDottedInitVersion = config &&
+  config.defaults &&
+  config.defaults['init.version']
+const dottedInitVersion =
+  config.get('init.version') !== defaultDottedInitVersion &&
+  config.get('init.version')
 var version = package.version ||
-              config.get('init.version') ||
+              dottedInitVersion ||
               config.get('init-version') ||
@@ -234,4 +240,10 @@ '1.0.0'
 
+const defaultDottedInitLicense = config &&
+  config.defaults &&
+  config.defaults['init.license']
+const dottedInitLicense =
+  config.get('init.license') !== defaultDottedInitLicense &&
+  config.get('init.license')
 var license = package.license ||
-              config.get('init.license') ||
+              dottedInitLicense ||
               config.get('init-license') ||
@@ -238,0 +250,0 @@ 'ISC'

package.json

 {
   "name": "init-package-json",
-  "version": "1.10.3",
+  "version": "2.0.0",
   "main": "init-package-json.js",
   "scripts": {
-    "prerelease": "npm t",
-    "postrelease": "npm publish && git push --follow-tags",
-    "release": "standard-version -s",
-    "test": "tap --nyc-arg=--all --coverage test"
+    "test": "tap",
+    "preversion": "npm test",
+    "postversion": "npm publish",
+    "prepublishOnly": "git push origin --follow-tags"
   },
@@ -20,17 +20,22 @@ "repository": {
     "glob": "^7.1.1",
-    "npm-package-arg": "^4.0.0 || ^5.0.0 || ^6.0.0",
+    "npm-package-arg": "^8.0.1",
     "promzard": "^0.3.0",
     "read": "~1.0.1",
-    "read-package-json": "1 || 2",
-    "semver": "2.x || 3.x || 4 || 5",
-    "validate-npm-package-license": "^3.0.1",
+    "read-package-json": "^2.1.2",
+    "semver": "^7.3.2",
+    "validate-npm-package-license": "^3.0.4",
     "validate-npm-package-name": "^3.0.0"
   },
   "devDependencies": {
-    "mkdirp": "^0.5.1",
-    "npm": "^5.7.1",
-    "rimraf": "^2.1.4",
-    "standard-version": "^4.3.0",
-    "tap": "^11.1.2"
+    "@npmcli/config": "^1.2.1",
+    "mkdirp": "^1.0.4",
+    "rimraf": "^3.0.2",
+    "tap": "^14.10.8"
   },
+  "engines": {
+    "node": ">=10"
+  },
+  "tap": {
+    "jobs": "1"
+  },
   "keywords": [
@@ -37,0 +42,0 @@ "init",

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

New author

Supply chain risk

A new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

15615

increased by2.92%

Dev dependency count

4

decreased by-20%

Lines of code

366

increased by3.39%

Worsened metrics

Number of medium supply chain risk alerts

1

increased byInfinity%

Dependency changes

• + Addedhosted-git-info@4.1.0(transitive)

• + Addedlru-cache@6.0.0(transitive)

• + Addednpm-package-arg@8.1.5(transitive)

• + Addedsemver@7.6.3(transitive)

• + Addedyallist@4.0.0(transitive)

• - Removednpm-package-arg@6.1.1(transitive)

• - Removedos-homedir@1.0.2(transitive)

• - Removedos-tmpdir@1.0.2(transitive)

• - Removedosenv@0.1.5(transitive)

• Updatednpm-package-arg@^8.0.1

• Updatedread-package-json@^2.1.2

• Updatedsemver@^7.3.2

• Updatedvalidate-npm-package-license@^3.0.4