is-my-node-vulnerable - npm Package Compare versions

Comparing version 1.4.1 to 1.5.0

index.js

@@ -93,3 +93,4 @@ #!/usr/bin/env node
     ) {
-      list.push(`${bold(vuln.cve)}: ${vuln.overview}\n${bold('Patched versions')}: ${vuln.patched}`)
+      const severity = vuln.severity === 'unknown' ? '' : `(${vuln.severity})`;
+      list.push(`${bold(vuln.cve)}${severity}: ${vuln.overview}\n${bold('Patched versions')}: ${vuln.patched}`)
     }
@@ -96,0 +97,0 @@ }

package.json

 {
   "name": "is-my-node-vulnerable",
-  "version": "1.4.1",
+  "version": "1.5.0",
   "description": "package that checks if your Node.js installation is vulnerable to known security vulnerabilities",
@@ -5,0 +5,0 @@ "main": "index.js",

README.md

@@ -95,3 +95,3 @@ # is-my-node-vulnerable
 
-This package also provide a Github Action, just include the `node-version` in the yml as follows in order to check an specific version:
+This package also provides a GitHub Action, just include the `node-version` in the yml as follows in order to check a specific version:
 
@@ -110,3 +110,3 @@ ```yml
       - name: Check Node.js
-        uses: RafaelGSS/is-my-node-vulnerable@v1.2.0
+        uses: RafaelGSS/is-my-node-vulnerable@v1
         with:
@@ -121,3 +121,3 @@ node-version: "18.14.1"
       - name: Check Node.js
-        uses: RafaelGSS/is-my-node-vulnerable@v1.2.0
+        uses: RafaelGSS/is-my-node-vulnerable@v1
         with:
@@ -124,0 +124,0 @@ node-version: "18.14.1"

test.js

@@ -42,2 +42,3 @@ const assert = require('assert')
   // Platform specific
+  assert.ok(await isNodeVulnerable('22.4.0', 'win32'))
   assert.ok(await isNodeVulnerable('19.0.0', 'linux'))
@@ -44,0 +45,0 @@ assert.ok(await isNodeVulnerable('18.0.0', 'win32'))

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

1357040

increased by0.01%

Lines of code

35453

increased by0.01%

No dependency changes