launch-darkly-feature-builder - npm Package Compare versions

Comparing version 0.7.0 to 0.8.0

package.json

 {
   "name": "launch-darkly-feature-builder",
-  "version": "0.7.0",
+  "version": "0.8.0",
   "description": "Builds and manages launch darkly features from code.",
@@ -37,3 +37,3 @@ "bin": {
     "command-line-usage": "^5.0.5",
-    "d2l-json-patch-gen": "git+https://github.com/Brightspace/d2l-json-patch-gen.git#1.1.0",
+    "d2l-json-patch-gen": "^1.1.0",
     "deep-freeze": "0.0.1",
@@ -40,0 +40,0 @@ "json-patch-gen": "^1.0.2",

src/planBuilder.js

@@ -29,3 +29,5 @@ const _ = require( 'lodash' );
 
-		const msg = `Unable to generate valid patch for ${ key }: Cannot simultaneously update environments and variations`;
+		const patchJson = JSON.stringify( patch, null, '\t' );
+
+		const msg = `Unable to generate valid patch for ${ key }: Cannot simultaneously update environments and variations: ${ patchJson }`;
 		throw new Error( msg );
@@ -32,0 +34,0 @@ }

Fixed alerts

Git dependency

Supply chain risk

Contains a dependency which resolves to a remote git URL. Dependencies fetched from git URLs are not immutable and can be used to inject untrusted code or reduce the likelihood of a reproducible install.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

53075

increased by0.03%

Lines of code

2070

increased by0.05%

Number of high supply chain risk alerts

0

decreased by-100%

Dependency changes

• + Addedd2l-json-patch-gen@1.1.0(transitive)

• Updatedd2l-json-patch-gen@^1.1.0