install-peers-cli - npm Package Compare versions

Comparing version 1.0.1 to 1.1.0

install.js

@@ -24,6 +24,16 @@ #!/usr/bin/env node
 function installPeerDeps() {
+  var argv;
 
+  // only run on `install`
+  if (process.env['npm_config_argv']) {
+    argv = JSON.parse(process.env['npm_config_argv']);
+    if (argv && argv['cooked'][0] !== 'install') {
+      console.log('Only run install-peer-deps after `install` command. Skipping.');
+      return;
+    }
+  }
+
   // check for the "kill switch"
   if (process.env[envLabel]) {
-    console.log('Skipping installing peerDependencies.');
+    console.log('Only run install-peer-deps once. Skipping.');
     return;
@@ -30,0 +40,0 @@ }

package.json

 {
   "name": "install-peers-cli",
-  "version": "1.0.1",
+  "version": "1.1.0",
   "description": "CLI to install project's peerDependencies, without side effects.",
@@ -5,0 +5,0 @@ "main": "index.js",

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

8855

increased by3.49%

Lines of code

166

increased by5.73%

Worsened metrics

Number of low supply chain risk alerts

13

increased by18.18%

No dependency changes