license-report - npm Package Compare versions

Comparing version 6.0.0 to 6.1.0

.vscode/launch.json

@@ -8,3 +8,3 @@ {
     {
-      "type": "pwa-node",
+      "type": "node",
       "request": "launch",
@@ -19,3 +19,3 @@ "name": "Launch Program",
       "name": "Debug with local packages",
-      "type": "pwa-node",
+      "type": "node",
       "request": "launch",
@@ -30,3 +30,3 @@ "skipFiles": [
       "name": "Debug with default fields",
-      "type": "pwa-node",
+      "type": "node",
       "request": "launch",
@@ -41,3 +41,3 @@ "skipFiles": [
       "name": "Debug with all fields",
-      "type": "pwa-node",
+      "type": "node",
       "request": "launch",
@@ -44,0 +44,0 @@ "skipFiles": [

CHANGELOG.md

@@ -5,2 +5,14 @@ # Changelog
 
+## [6.1.0](https://github.com/ironSource/license-report/compare/v6.0.0...v6.1.0) (2022-07-31)
+
+
+### Features
+
+* add new optional fields with data from registry ([ead1a55](https://github.com/ironSource/license-report/commit/ead1a550d212a030e657fef71f245d2299c76d08))
+
+
+### Bug Fixes
+
+* issue [#101](https://github.com/ironSource/license-report/issues/101) (config.registry without trailing slash throws an error) ([76525ed](https://github.com/ironSource/license-report/commit/76525ed1a411fc007e4ea655c17fcef042c789f8))
+
 ## [6.0.0](https://github.com/ironSource/license-report/compare/v5.1.0...v6.0.0) (2022-07-07)
@@ -7,0 +19,0 @@

index.js

@@ -5,8 +5,10 @@ #!/usr/bin/env node
 import path from 'node:path';
+
 import createDebugMessages from 'debug';
+
 import config from './lib/config.js';
 import getFormatter from './lib/getFormatter.js';
 import addLocalPackageData from './lib/addLocalPackageData.js';
-import addPackagesToIndex from './lib/addPackagesToIndex.js';
 import addPackageDataFromRepository from './lib/addPackageDataFromRepository.js';
+import getDependencies from './lib/getDependencies.js';
 import packageDataToReportData from './lib/packageDataToReportData.js';
@@ -43,33 +45,8 @@ import util from './lib/util.js';
     }
-
-    const deps = packageJson.dependencies
-    const peerDeps = packageJson.peerDependencies
-    const optDeps = packageJson.optionalDependencies
-    const devDeps = packageJson.devDependencies
-
+    
+    // an index of all the dependencies
+    const inclusions = util.isNullOrUndefined(config.only) ? null : config.only.split(',')
     const exclusions = Array.isArray(config.exclude) ? config.exclude : [config.exclude]
+    let depsIndex = getDependencies(packageJson, exclusions, inclusions)
 
-    // an index of all the dependencies
-    let depsIndex = []
-
-    if (!config.only || config.only.indexOf('prod') > -1) {
-      addPackagesToIndex(deps, depsIndex, exclusions)
-    }
-
-    if (!config.only || config.only.indexOf('dev') > -1) {
-			addPackagesToIndex(devDeps, depsIndex, exclusions)
-    }
-
-    if (!config.only || config.only.indexOf('peer') > -1) {
-      if (peerDeps) {
-        addPackagesToIndex(peerDeps, depsIndex, exclusions)
-      }
-    }
-
-    if (!config.only || config.only.indexOf('opt') > -1) {
-      if (optDeps) {
-        addPackagesToIndex(optDeps, depsIndex, exclusions)
-      }
-    }
-
     const projectRootPath = path.dirname(resolvedPackageJson)
@@ -76,0 +53,0 @@ const packagesData = await Promise.all(

lib/addPackageDataFromRepository.js

@@ -7,2 +7,11 @@ import semver from 'semver';
 /**
+ * Create a string from the package name and the package version
+ * @param {object} packageEntry - object with information about 1 dependency from the package.json
+ * @returns string in the format 'packageName@packageVersion
+ */
+function toPackageString(packageEntry) {
+	return packageEntry.fullName + '@' + packageEntry.version
+}
+
+/**
  * Collects the data for a single package (link, installedFrom, remoteVersion)
@@ -31,2 +40,4 @@ * @param {object} packageEntry - object with information about 1 dependency from the package.json
 	let installedFrom = ''
+	let latest = ''
+	let lastModified = ''
 	const fullPackageName = packageEntry.fullName
@@ -60,2 +71,14 @@
 
+			// latestRemoteVersion
+			latest = notAvailableText
+			if ((json['dist-tags'] !== undefined) && (json['dist-tags'].latest !== undefined)) {
+				latest = json['dist-tags'].latest
+			}
+
+			// latestRemoteModified
+			lastModified = notAvailableText
+			if ((json.time !== undefined) && (json.time.modified !== undefined)) {
+				lastModified = json.time.modified
+			}
+
 			// link
@@ -73,3 +96,5 @@ if (version !== null) {
 			version = `no versions in registry for package ${fullPackageName}`
-		}
+			latest = notAvailableText
+			lastModified = notAvailableText
+				}
 	} else {
@@ -80,3 +105,5 @@ link = notAvailableText
 		version = notAvailableText
-	}
+		latest = notAvailableText
+		lastModified = notAvailableText
+}
 
@@ -92,2 +119,4 @@ return {
 		remoteVersion: version.toString(),
+		latestRemoteVersion: latest,
+		latestRemoteModified: lastModified,
 		comment: version.toString()
@@ -97,6 +126,2 @@ }
 
-function toPackageString(entry) {
-	return entry.fullName + '@' + entry.version
-}
-
 export default addPackageDataFromRepository;

lib/config.js

@@ -118,2 +118,10 @@ import path from 'node:path';
 	},
+	latestRemoteVersion: {
+		value: 'n/a',
+		label: 'latest remote version'
+	},
+	latestRemoteModified: {
+		value: 'n/a',
+		label: 'latest remote modified'
+	},
 	author: {
@@ -120,0 +128,0 @@ value: 'n/a',

lib/getPackageDataFromRepository.js

@@ -0,3 +1,6 @@
+import path from 'node:path';
+
 import got from 'got';
 import createDebugMessages from 'debug';
+
 import config from './config.js';
@@ -13,3 +16,4 @@
 async function getPackageDataFromRepository(name) {
-	const uri = config.registry + name
+	const uri = path.join(config.registry, name)
+	// const uri = config.registry + name
 
@@ -16,0 +20,0 @@ debug('getPackageDataFromRepository - REQUEST %s', uri)

lib/util.js

@@ -13,2 +13,6 @@ import fs from 'node:fs';
 
+function isNullOrUndefined(element) {
+  return ((element === undefined) || (element === null))
+}
+
 const helpText = `Generate a detailed report of the licenses of all projects dependencies.
@@ -45,3 +49,4 @@
   readJson,
+  isNullOrUndefined,
   helpText
 };

package.json

 {
   "name": "license-report",
-  "version": "6.0.0",
+  "version": "6.1.0",
   "description": "creates a short report about project's dependencies (license, url etc)",
@@ -30,3 +30,3 @@ "main": "index.js",
     "eol": "^0.9.1",
-    "got": "^12.1.0",
+    "got": "^12.3.0",
     "rc": "^1.2.8",
@@ -42,3 +42,3 @@ "semver": "^7.3.7",
     "mocha": "^10.0.0",
-    "nock": "^13.2.8",
+    "nock": "^13.2.9",
     "standard-version": "^9.5.0"
@@ -45,0 +45,0 @@ },

README.md

 # license report tool
-![Version](https://img.shields.io/badge/version-6.0.0-blue.svg?cacheSeconds=2592000)
+![Version](https://img.shields.io/badge/version-6.1.0-blue.svg?cacheSeconds=2592000)
 [![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](https://github.com/kefranabg/readme-md-generator/blob/master/LICENSE)
@@ -144,5 +144,7 @@
 | installedFrom | installed from | the download source for the installed package (optional field) |
-| remoteVersion | remote version | latest available version of the package (can be different from the installed version) |
+| remoteVersion | remote version | latest available version of the package in the registry following defined semver range (can be different from the installed version) |
 | installedVersion | installed version | installed version of the package (can be different from the remote version) |
 | definedVersion | defined version | version of the package as defined in the (dev-) dependencies entry (can start with a semver range character) |
+| latestRemoteVersion | latest remote version | latest version of the package available in the registry (optional field) |
+| latestRemoteModified | latest remote modified | last modification date of the package in the registry (optional field) |
 | comment | comment | deprecated (replaced by field 'remoteVersion'); will be removed in a future version |
@@ -162,4 +164,25 @@ | author | author | author of the package |
 
-Use [rc](https://github.com/dominictarr/rc) for further customization.
+license-report uses the 'rc' package for handling configuration. So it is possible to add options to the command line, use a custom (partial) configuration file or even a default configuration file in a project.
 
+A default project configuration file must be placed in the project root path and be named `.license-reportrc`. The file format is 'json'. An example looks like this:
+```
+{
+  "output": "table",
+  "fields": [
+    "name",
+    "licenseType",
+    "installedVersion",
+    "definedVersion",
+    "remoteVersion",
+    "latestRemoteVersion",
+    "latestRemoteModified",
+    "author"
+  ]
+}
+```
+
+To find out what configuration options are available see the `/lib/config.js` file in the project source.
+
+For more 'rc' configuration details see the [rc](https://github.com/dominictarr/rc) documentation.
+
 ## Debug report generation
@@ -166,0 +189,0 @@

test/addPackageDataFromRepository.test.js

@@ -27,4 +27,4 @@ import assert from 'node:assert';
 			fullName: 'async',
-			name: 'async',
-			version: '^3.1.1',
+			"name": 'async',
+			"version": '^3.1.1',
 			installedVersion: '3.2.0',
@@ -44,5 +44,7 @@ licenseType: 'MIT',
 		assert.strictEqual(packageReportData.name, 'async')
-		assert.strictEqual(packageReportData.remoteVersion, '3.2.2')
 		assert.strictEqual(packageReportData.link, 'git+https://github.com/caolan/async.git')
 		assert.strictEqual(packageReportData.installedFrom, 'https://registry.npmjs.org/async/-/async-3.2.0.tgz')
+		assert.strictEqual(packageReportData.remoteVersion, '3.2.2')
+		assert.strictEqual(packageReportData.latestRemoteVersion, '3.2.4')
+		assert.strictEqual(packageReportData.latestRemoteModified, '2022-07-25T16:10:41.997Z')
 		assert.ok(scope.isDone())
@@ -54,4 +56,4 @@ })
 			fullName: '@kessler/tableify',
-			name: 'tableify',
-			version: '^1.0.1',
+			"name": 'tableify',
+			"version": '^1.0.1',
 			scope: 'kessler',
@@ -73,5 +75,7 @@ alias: '@kessler/tableify_1.0.1',
 		assert.strictEqual(packageReportData.name, '@kessler/tableify')
-		assert.strictEqual(packageReportData.remoteVersion, '1.0.2')
 		assert.strictEqual(packageReportData.link, 'git+https://github.com/kessler/node-tableify.git')
 		assert.strictEqual(packageReportData.installedFrom, 'https://registry.npmjs.org/@kessler/tableify/-/tableify-1.0.2.tgz')
+		assert.strictEqual(packageReportData.remoteVersion, '1.0.2')
+		assert.strictEqual(packageReportData.latestRemoteVersion, '1.0.2')
+		assert.strictEqual(packageReportData.latestRemoteModified, '2022-04-05T23:26:35.798Z')
 		assert.ok(scope.isDone())
@@ -83,4 +87,4 @@ })
 			fullName: 'async',
-			name: 'async',
-			version: 'a.b.c',
+			"name": 'async',
+			"version": 'a.b.c',
 			installedVersion: '3.2.0',
@@ -100,5 +104,7 @@ licenseType: 'MIT',
 		assert.strictEqual(packageReportData.name, 'async')
-		assert.strictEqual(packageReportData.remoteVersion, "no matching version found in registry for package 'async@a.b.c'")
 		assert.strictEqual(packageReportData.link, 'n/a')
 		assert.strictEqual(packageReportData.installedFrom, 'https://registry.npmjs.org/async/-/async-3.2.0.tgz')
+		assert.strictEqual(packageReportData.remoteVersion, "no matching version found in registry for package 'async@a.b.c'")
+		assert.strictEqual(packageReportData.latestRemoteVersion, '3.2.4')
+		assert.strictEqual(packageReportData.latestRemoteModified, '2022-07-25T16:10:41.997Z')
 		assert.ok(scope.isDone())
@@ -110,4 +116,4 @@ })
 			fullName: 'async',
-			name: 'async',
-			version: '0.0.1',
+			"name": 'async',
+			"version": '0.0.1',
 			installedVersion: '3.2.0',
@@ -127,5 +133,7 @@ licenseType: 'MIT',
 		assert.strictEqual(packageReportData.name, 'async')
-		assert.strictEqual(packageReportData.remoteVersion, "no matching version found in registry for package 'async@0.0.1'")
 		assert.strictEqual(packageReportData.link, 'n/a')
 		assert.strictEqual(packageReportData.installedFrom, 'https://registry.npmjs.org/async/-/async-3.2.0.tgz')
+		assert.strictEqual(packageReportData.remoteVersion, "no matching version found in registry for package 'async@0.0.1'")
+		assert.strictEqual(packageReportData.latestRemoteVersion, '3.2.4')
+		assert.strictEqual(packageReportData.latestRemoteModified, '2022-07-25T16:10:41.997Z')
 		assert.ok(scope.isDone())
@@ -137,4 +145,4 @@ })
 			fullName: 'ol',
-			name: 'ol',
-			version: 'dev',
+			"name": 'ol',
+			"version": 'dev',
 			installedVersion:  '6.5.1-dev.1622493276948',
@@ -154,5 +162,7 @@ licenseType: 'BSD-2-Clause',
 		assert.strictEqual(packageReportData.name, 'ol')
-		assert.strictEqual(packageReportData.remoteVersion, '6.14.2-dev.1656800207214')
 		assert.strictEqual(packageReportData.link, 'git://github.com/openlayers/openlayers.git')
 		assert.strictEqual(packageReportData.installedFrom, 'https://registry.npmjs.org/ol/-/ol-6.5.1-dev.1622493276948.tgz')
+		assert.strictEqual(packageReportData.remoteVersion, '6.14.2-dev.1656800207214')
+		assert.strictEqual(packageReportData.latestRemoteVersion, '6.14.1')
+		assert.strictEqual(packageReportData.latestRemoteModified, '2022-07-30T22:00:12.715Z')
 		assert.ok(scope.isDone())
@@ -164,5 +174,5 @@ })
 			fullName: '@parcel/optimizer-cssnano',
-			name: 'optimizer-cssnano',
+			"name": 'optimizer-cssnano',
 			scope: 'parcel',
-			version: 'nightly',
+			"version": 'nightly',
 			installedVersion: '2.0.0-nightly.662',
@@ -182,5 +192,7 @@ licenseType: 'MIT',
 		assert.strictEqual(packageReportData.name, '@parcel/optimizer-cssnano')
-		assert.strictEqual(packageReportData.remoteVersion, '2.0.0-nightly.1135')
 		assert.strictEqual(packageReportData.link, 'git+https://github.com/parcel-bundler/parcel.git')
 		assert.strictEqual(packageReportData.installedFrom, 'https://registry.npmjs.org/@parcel/optimizer-cssnano/-/optimizer-cssnano-2.0.0-nightly.662.tgz')
+		assert.strictEqual(packageReportData.remoteVersion, '2.0.0-nightly.1135')
+		assert.strictEqual(packageReportData.latestRemoteVersion, '2.6.2')
+		assert.strictEqual(packageReportData.latestRemoteModified, '2022-07-28T00:41:39.714Z')
 		assert.ok(scope.isDone())
@@ -192,4 +204,4 @@ })
 			fullName: 'mocha',
-			name: 'mocha',
-			version: '^8.3.1',
+			"name": 'mocha',
+			"version": '^8.3.1',
 			alias: 'mocha_8.3.1',
@@ -210,5 +222,7 @@ installedVersion: '8.3.1',
 		assert.strictEqual(packageReportData.name, 'mocha')
-		assert.strictEqual(packageReportData.remoteVersion, '8.4.0')
 		assert.strictEqual(packageReportData.link, 'git+https://github.com/mochajs/mocha.git')
 		assert.strictEqual(packageReportData.installedFrom, 'https://registry.npmjs.org/mocha/-/mocha-8.3.1.tgz')
+		assert.strictEqual(packageReportData.remoteVersion, '8.4.0')
+		assert.strictEqual(packageReportData.latestRemoteVersion, '10.0.0')
+		assert.strictEqual(packageReportData.latestRemoteModified, '2022-06-20T01:14:43.542Z')
 		assert.ok(scope.isDone())
@@ -220,4 +234,4 @@ })
 			fullName: 'my-local-package',
-			name: 'my-local-package',
-			version: 'file:local-libs/my-local-package',
+			"name": 'my-local-package',
+			"version": 'file:local-libs/my-local-package',
 			alias: '',
@@ -231,5 +245,7 @@ installedVersion: '1.2.3',
 		assert.strictEqual(packageReportData.name, 'my-local-package')
-		assert.strictEqual(packageReportData.remoteVersion, 'n/a')
 		assert.strictEqual(packageReportData.link, 'n/a')
 		assert.strictEqual(packageReportData.installedFrom, 'file:local-libs/my-local-package')
+		assert.strictEqual(packageReportData.remoteVersion, 'n/a')
+		assert.strictEqual(packageReportData.latestRemoteVersion, 'n/a')
+		assert.strictEqual(packageReportData.latestRemoteModified, 'n/a')
 	})
@@ -240,4 +256,4 @@
 			fullName: 'debug',
-			name: 'debug',
-			version: 'git://github.com/debug-js/debug.git',
+			"name": 'debug',
+			"version": 'git://github.com/debug-js/debug.git',
 			alias: '',
@@ -251,5 +267,7 @@ installedVersion: '3.4.5',
 		assert.strictEqual(packageReportData.name, 'debug')
-		assert.strictEqual(packageReportData.remoteVersion, 'n/a')
 		assert.strictEqual(packageReportData.link, 'n/a')
 		assert.strictEqual(packageReportData.installedFrom, 'git://github.com/debug-js/debug.git')
+		assert.strictEqual(packageReportData.remoteVersion, 'n/a')
+		assert.strictEqual(packageReportData.latestRemoteVersion, 'n/a')
+		assert.strictEqual(packageReportData.latestRemoteModified, 'n/a')
 	})
@@ -260,4 +278,4 @@
 			fullName: 'async',
-			name: 'async',
-			version: 'github:caolan/async',
+			"name": 'async',
+			"version": 'github:caolan/async',
 			alias: '',
@@ -271,5 +289,7 @@ installedVersion: '5.6.7',
 		assert.strictEqual(packageReportData.name, 'async')
-		assert.strictEqual(packageReportData.remoteVersion, 'n/a')
 		assert.strictEqual(packageReportData.link, 'n/a')
 		assert.strictEqual(packageReportData.installedFrom, 'github:caolan/async')
+		assert.strictEqual(packageReportData.remoteVersion, 'n/a')
+		assert.strictEqual(packageReportData.latestRemoteVersion, 'n/a')
+		assert.strictEqual(packageReportData.latestRemoteModified, 'n/a')
 	})
@@ -279,182 +299,206 @@ })
 const responses = {
-	async: {
-		name: "async",
-		description: "Higher-order functions and common patterns for asynchronous code",
-		versions: {
+	"async": {
+		"name": "async",
+		"description": "Higher-order functions and common patterns for asynchronous code",
+		"dist-tags": {
+			"latest": "3.2.4",
+			"next": "3.1.0"
+		},
+		"versions": {
 			"3.1.1": {
-				name: "async",
-				description: "Higher-order functions and common patterns for asynchronous code",
-				version: "3.1.1",
-				repository: {
-					type: "git",
-					url: "git+https://github.com/caolan/async.git",
+				"name": "async",
+				"description": "Higher-order functions and common patterns for asynchronous code",
+				"version": "3.1.1",
+				"repository": {
+					"type": "git",
+					"url": "git+https://github.com/caolan/async.git",
 				},
-				dist: {
-					tarball: "https://registry.npmjs.org/async/-/async-3.1.1.tgz",
+				"dist": {
+					"tarball": "https://registry.npmjs.org/async/-/async-3.1.1.tgz",
 				},
 			},
 			"3.2.0": {
-				name: "async",
-				description: "Higher-order functions and common patterns for asynchronous code",
-				version: "3.2.0",
-				repository: {
-					type: "git",
-					url: "git+https://github.com/caolan/async.git",
+				"name": "async",
+				"description": "Higher-order functions and common patterns for asynchronous code",
+				"version": "3.2.0",
+				"repository": {
+					"type": "git",
+					"url": "git+https://github.com/caolan/async.git",
 				},
-				dist: {
-					tarball: "https://registry.npmjs.org/async/-/async-3.2.0.tgz",
+				"dist": {
+					"tarball": "https://registry.npmjs.org/async/-/async-3.2.0.tgz",
 				},
 			},
 			"3.2.1": {
-				name: "async",
-				description: "Higher-order functions and common patterns for asynchronous code",
-				version: "3.2.1",
-				repository: {
-					type: "git",
-					url: "git+https://github.com/caolan/async.git",
+				"name": "async",
+				"description": "Higher-order functions and common patterns for asynchronous code",
+				"version": "3.2.1",
+				"repository": {
+					"type": "git",
+					"url": "git+https://github.com/caolan/async.git",
 				},
-				dist: {
-					tarball: "https://registry.npmjs.org/async/-/async-3.2.1.tgz",
+				"dist": {
+					"tarball": "https://registry.npmjs.org/async/-/async-3.2.1.tgz",
 				},
 			},
 			"3.2.2": {
-				name: "async",
-				description: "Higher-order functions and common patterns for asynchronous code",
-				version: "3.2.2",
-				repository: {
-					type: "git",
-					url: "git+https://github.com/caolan/async.git",
+				"name": "async",
+				"description": "Higher-order functions and common patterns for asynchronous code",
+				"version": "3.2.2",
+				"repository": {
+					"type": "git",
+					"url": "git+https://github.com/caolan/async.git",
 				},
-				dist: {
-					tarball: "https://registry.npmjs.org/async/-/async-3.2.2.tgz",
+				"dist": {
+					"tarball": "https://registry.npmjs.org/async/-/async-3.2.2.tgz",
 				},
 			},
 		},
+		"time": {
+			"modified": "2022-07-25T16:10:41.997Z",
+			"created": "2010-12-19T16:41:51.765Z",
+			"1.0.0": "2015-05-20T23:40:05.710Z"
+		}
 	},
 	"@kessler/tableify": {
-		name: "@kessler/tableify",
-		versions: {
+		"name": "@kessler/tableify",
+		"time": {
+			"created": "2020-10-09T17:34:28.751Z",
+			"modified": "2022-04-05T23:26:35.798Z",
+			"1.0.0": "2020-10-09T17:34:28.868Z",
+			"1.0.1": "2020-10-09T17:38:36.597Z",
+			"1.0.2": "2020-10-09T17:40:12.994Z"
+		},
+		"dist-tags": {
+			"latest": "1.0.2"
+		},
+		"versions": {
 			"1.0.0": {
-				name: "@kessler/tableify",
+				"name": "@kessler/tableify",
 				private: false,
-				version: "1.0.0",
-				description: "Create HTML tables from Javascript Objects",
-				repository: {
-					type: "git",
-					url: "git+https://github.com/wankdanker/node-tableify.git",
+				"version": "1.0.0",
+				"description": "Create HTML tables from Javascript Objects",
+				"repository": {
+					"type": "git",
+					"url": "git+https://github.com/wankdanker/node-tableify.git",
 				},
-				dist: {
-					tarball: "https://registry.npmjs.org/@kessler/tableify/-/tableify-1.0.0.tgz",
-					fileCount: 8,
-					unpackedSize: 13396,
+				"dist": {
+					"tarball": "https://registry.npmjs.org/@kessler/tableify/-/tableify-1.0.0.tgz",
+					"fileCount": 8,
+					"unpackedSize": 13396,
 				},
 			},
 			"1.0.1": {
-				name: "@kessler/tableify",
+				"name": "@kessler/tableify",
 				private: false,
-				version: "1.0.1",
-				description: "Create HTML tables from Javascript Objects",
-				repository: {
-					type: "git",
-					url: "git+https://github.com/kessler/node-tableify.git",
+				"version": "1.0.1",
+				"description": "Create HTML tables from Javascript Objects",
+				"repository": {
+					"type": "git",
+					"url": "git+https://github.com/kessler/node-tableify.git",
 				},
-				dist: {
-					tarball: "https://registry.npmjs.org/@kessler/tableify/-/tableify-1.0.1.tgz",
-					fileCount: 8,
-					unpackedSize: 13387,
+				"dist": {
+					"tarball": "https://registry.npmjs.org/@kessler/tableify/-/tableify-1.0.1.tgz",
+					"fileCount": 8,
+					"unpackedSize": 13387,
 				},
 			},
 			"1.0.2": {
-				name: "@kessler/tableify",
+				"name": "@kessler/tableify",
 				private: false,
-				version: "1.0.2",
-				description: "Create HTML tables from Javascript Objects",
-				repository: {
-					type: "git",
-					url: "git+https://github.com/kessler/node-tableify.git",
+				"version": "1.0.2",
+				"description": "Create HTML tables from Javascript Objects",
+				"repository": {
+					"type": "git",
+					"url": "git+https://github.com/kessler/node-tableify.git",
 				},
-				dist: {
-					tarball: "https://registry.npmjs.org/@kessler/tableify/-/tableify-1.0.2.tgz",
-					fileCount: 8,
-					unpackedSize: 13353,
+				"dist": {
+					"tarball": "https://registry.npmjs.org/@kessler/tableify/-/tableify-1.0.2.tgz",
+					"fileCount": 8,
+					"unpackedSize": 13353,
 				},
 			},
+		}
+	},
+	"ol": {
+		"name": "ol",
+		"description": "OpenLayers mapping library",
+		"time": {
+			"modified": "2022-07-30T22:00:12.715Z",
+			"created": "2014-10-01T04:57:41.727Z",
+			"3.1.0-pre.1": "2014-10-01T04:57:41.727Z",
 		},
-	},
-	ol: {
-		name: "ol",
-		description: "OpenLayers mapping library",
 		"dist-tags": {
-			latest: "6.14.1",
-			dev: "6.14.2-dev.1656800207214",
+			"latest": "6.14.1",
+			"dev": "6.14.2-dev.1656800207214",
 		},
-		versions: {
+		"versions": {
 			"6.5.1-dev.1622493276948": {
-				name: "ol",
-				version: "6.5.1-dev.1622493276948",
-				description: "OpenLayers mapping library",
-				repository: {
-					type: "git",
-					url: "git://github.com/openlayers/openlayers.git",
+				"name": "ol",
+				"version": "6.5.1-dev.1622493276948",
+				"description": "OpenLayers mapping library",
+				"repository": {
+					"type": "git",
+					"url": "git://github.com/openlayers/openlayers.git",
 				},
-				dist: {
-					tarball: "https://registry.npmjs.org/ol/-/ol-6.5.1-dev.1622493276948.tgz",
-					fileCount: 993,
-					unpackedSize: 7033249,
+				"dist": {
+					"tarball": "https://registry.npmjs.org/ol/-/ol-6.5.1-dev.1622493276948.tgz",
+					"fileCount": 993,
+					"unpackedSize": 7033249,
 				},
 			},
 			"6.14.1": {
-				name: "ol",
-				version: "6.14.1",
-				description: "OpenLayers mapping library",
-				repository: {
-					type: "git",
-					url: "git://github.com/openlayers/openlayers.git",
+				"name": "ol",
+				"version": "6.14.1",
+				"description": "OpenLayers mapping library",
+				"repository": {
+					"type": "git",
+					"url": "git://github.com/openlayers/openlayers.git",
 				},
-				dist: {
-					tarball: "https://registry.npmjs.org/ol/-/ol-6.14.1.tgz",
-					fileCount: 1706,
-					unpackedSize: 9323815,
+				"dist": {
+					"tarball": "https://registry.npmjs.org/ol/-/ol-6.14.1.tgz",
+					"fileCount": 1706,
+					"unpackedSize": 9323815,
 				},
 			},
 			"6.14.2-dev.1656620100371": {
-				name: "ol",
-				version: "6.14.2-dev.1656620100371",
-				description: "OpenLayers mapping library",
-				repository: {
-					type: "git",
-					url: "git://github.com/openlayers/openlayers.git",
+				"name": "ol",
+				"version": "6.14.2-dev.1656620100371",
+				"description": "OpenLayers mapping library",
+				"repository": {
+					"type": "git",
+					"url": "git://github.com/openlayers/openlayers.git",
 				},
-				dist: {
-					tarball: "https://registry.npmjs.org/ol/-/ol-6.14.2-dev.1656620100371.tgz",
-					fileCount: 1711,
-					unpackedSize: 9395612,
+				"dist": {
+					"tarball": "https://registry.npmjs.org/ol/-/ol-6.14.2-dev.1656620100371.tgz",
+					"fileCount": 1711,
+					"unpackedSize": 9395612,
 				},
 			},
 			"6.14.2-dev.1656692026667": {
-				name: "ol",
-				version: "6.14.2-dev.1656692026667",
-				description: "OpenLayers mapping library",
-				repository: {
-					type: "git",
-					url: "git://github.com/openlayers/openlayers.git",
+				"name": "ol",
+				"version": "6.14.2-dev.1656692026667",
+				"description": "OpenLayers mapping library",
+				"repository": {
+					"type": "git",
+					"url": "git://github.com/openlayers/openlayers.git",
 				},
-				dist: {
-					tarball: "https://registry.npmjs.org/ol/-/ol-6.14.2-dev.1656692026667.tgz",
-					fileCount: 1711,
-					unpackedSize: 9395909,
+				"dist": {
+					"tarball": "https://registry.npmjs.org/ol/-/ol-6.14.2-dev.1656692026667.tgz",
+					"fileCount": 1711,
+					"unpackedSize": 9395909,
 				},
 			},
 			"6.14.2-dev.1656800207214": {
-				name: "ol",
-				version: "6.14.2-dev.1656800207214",
-				description: "OpenLayers mapping library",
-				repository: {
-					type: "git",
-					url: "git://github.com/openlayers/openlayers.git",
+				"name": "ol",
+				"version": "6.14.2-dev.1656800207214",
+				"description": "OpenLayers mapping library",
+				"repository": {
+					"type": "git",
+					"url": "git://github.com/openlayers/openlayers.git",
 				},
-				dist: {
-					tarball: "https://registry.npmjs.org/ol/-/ol-6.14.2-dev.1656800207214.tgz",
-					fileCount: 1711,
-					unpackedSize: 9397424,
+				"dist": {
+					"tarball": "https://registry.npmjs.org/ol/-/ol-6.14.2-dev.1656800207214.tgz",
+					"fileCount": 1711,
+					"unpackedSize": 9397424,
 				},
@@ -465,58 +509,64 @@ },
 	"@parcel/optimizer-cssnano": {
-		name: "@parcel/optimizer-cssnano",
+		"name": "@parcel/optimizer-cssnano",
+		"time": {
+			"created": "2019-08-13T15:30:40.581Z",
+			"2.0.0-alpha.1": "2019-08-13T15:30:40.804Z",
+			"modified": "2022-07-28T00:41:39.714Z",
+			"2.0.0-alpha.1.1": "2019-08-13T15:49:23.139Z",
+		},
 		"dist-tags": {
-			latest: "2.6.2",
-			nightly: "2.0.0-nightly.1135",
+			"latest": "2.6.2",
+			"nightly": "2.0.0-nightly.1135",
 		},
-		versions: {
+		"versions": {
 			"2.6.2": {
-				name: "@parcel/optimizer-cssnano",
-				version: "2.6.2",
-				repository: {
-					type: "git",
-					url: "git+https://github.com/parcel-bundler/parcel.git",
+				"name": "@parcel/optimizer-cssnano",
+				"version": "2.6.2",
+				"repository": {
+					"type": "git",
+					"url": "git+https://github.com/parcel-bundler/parcel.git",
 				},
-				dist: {
-					tarball: "https://registry.npmjs.org/@parcel/optimizer-cssnano/-/optimizer-cssnano-2.6.2.tgz",
-					fileCount: 4,
-					unpackedSize: 6475,
+				"dist": {
+					"tarball": "https://registry.npmjs.org/@parcel/optimizer-cssnano/-/optimizer-cssnano-2.6.2.tgz",
+					"fileCount": 4,
+					"unpackedSize": 6475,
 				},
 			},
 			"2.0.0-nightly.662": {
-				name: "@parcel/optimizer-cssnano",
-				version: "2.0.0-nightly.662",
-				repository: {
-					type: "git",
-					url: "git+https://github.com/parcel-bundler/parcel.git",
+				"name": "@parcel/optimizer-cssnano",
+				"version": "2.0.0-nightly.662",
+				"repository": {
+					"type": "git",
+					"url": "git+https://github.com/parcel-bundler/parcel.git",
 				},
-				dist: {
-					tarball: "https://registry.npmjs.org/@parcel/optimizer-cssnano/-/optimizer-cssnano-2.0.0-nightly.662.tgz",
-					fileCount: 4,
-					unpackedSize: 5313,
+				"dist": {
+					"tarball": "https://registry.npmjs.org/@parcel/optimizer-cssnano/-/optimizer-cssnano-2.0.0-nightly.662.tgz",
+					"fileCount": 4,
+					"unpackedSize": 5313,
 				},
 			},
 			"2.0.0-nightly.1134": {
-				name: "@parcel/optimizer-cssnano",
-				version: "2.0.0-nightly.1134",
-				repository: {
-					type: "git",
-					url: "git+https://github.com/parcel-bundler/parcel.git",
+				"name": "@parcel/optimizer-cssnano",
+				"version": "2.0.0-nightly.1134",
+				"repository": {
+					"type": "git",
+					"url": "git+https://github.com/parcel-bundler/parcel.git",
 				},
-				dist: {
-					tarball: "https://registry.npmjs.org/@parcel/optimizer-cssnano/-/optimizer-cssnano-2.0.0-nightly.1134.tgz",
-					fileCount: 4,
-					unpackedSize: 6543,
+				"dist": {
+					"tarball": "https://registry.npmjs.org/@parcel/optimizer-cssnano/-/optimizer-cssnano-2.0.0-nightly.1134.tgz",
+					"fileCount": 4,
+					"unpackedSize": 6543,
 				},
 			},
 			"2.0.0-nightly.1135": {
-				name: "@parcel/optimizer-cssnano",
-				version: "2.0.0-nightly.1135",
-				repository: {
-					type: "git",
-					url: "git+https://github.com/parcel-bundler/parcel.git",
+				"name": "@parcel/optimizer-cssnano",
+				"version": "2.0.0-nightly.1135",
+				"repository": {
+					"type": "git",
+					"url": "git+https://github.com/parcel-bundler/parcel.git",
 				},
-				dist: {
-					tarball: "https://registry.npmjs.org/@parcel/optimizer-cssnano/-/optimizer-cssnano-2.0.0-nightly.1135.tgz",
-					fileCount: 4,
-					unpackedSize: 6543,
+				"dist": {
+					"tarball": "https://registry.npmjs.org/@parcel/optimizer-cssnano/-/optimizer-cssnano-2.0.0-nightly.1135.tgz",
+					"fileCount": 4,
+					"unpackedSize": 6543,
 				},
@@ -526,73 +576,83 @@ },
 	},
-	mocha: {
-		name: "mocha",
-		description: "simple, flexible, fun test framework",
-		versions: {
+	"mocha": {
+		"name": "mocha",
+		"description": "simple, flexible, fun test framework",
+		"time": {
+			"modified": "2022-06-20T01:14:43.542Z",
+			"created": "2011-11-08T23:08:55.982Z",
+			"0.0.1-alpha1": "2011-11-08T23:08:57.384Z",
+		},
+		"dist-tags": {
+			"latest": "10.0.0",
+			"esm": "7.0.0-esm1",
+			"latest-6": "6.2.3"
+		},
+		"versions": {
 			"2.6.2": {
-				name: "@parcel/optimizer-cssnano",
-				version: "2.6.2",
-				repository: {
-					type: "git",
-					url: "git+https://github.com/parcel-bundler/parcel.git",
+				"name": "@parcel/optimizer-cssnano",
+				"version": "2.6.2",
+				"repository": {
+					"type": "git",
+					"url": "git+https://github.com/parcel-bundler/parcel.git",
 				},
-				dist: {
-					tarball: "https://registry.npmjs.org/@parcel/optimizer-cssnano/-/optimizer-cssnano-2.6.2.tgz",
-					fileCount: 4,
-					unpackedSize: 6475,
+				"dist": {
+					"tarball": "https://registry.npmjs.org/@parcel/optimizer-cssnano/-/optimizer-cssnano-2.6.2.tgz",
+					"fileCount": 4,
+					"unpackedSize": 6475,
 				},
 			},
 			"8.3.0": {
-				name: "mocha",
-				version: "8.3.0",
-				description: "simple, flexible, fun test framework",
-				repository: {
-					type: "git",
-					url: "git+https://github.com/mochajs/mocha.git",
+				"name": "mocha",
+				"version": "8.3.0",
+				"description": "simple, flexible, fun test framework",
+				"repository": {
+					"type": "git",
+					"url": "git+https://github.com/mochajs/mocha.git",
 				},
-				dist: {
-					tarball: "https://registry.npmjs.org/mocha/-/mocha-8.3.0.tgz",
-					fileCount: 75,
-					unpackedSize: 3072252,
+				"dist": {
+					"tarball": "https://registry.npmjs.org/mocha/-/mocha-8.3.0.tgz",
+					"fileCount": 75,
+					"unpackedSize": 3072252,
 				},
 			},
 			"8.3.1": {
-				name: "mocha",
-				version: "8.3.1",
-				description: "simple, flexible, fun test framework",
-				repository: {
-					type: "git",
-					url: "git+https://github.com/mochajs/mocha.git",
+				"name": "mocha",
+				"version": "8.3.1",
+				"description": "simple, flexible, fun test framework",
+				"repository": {
+					"type": "git",
+					"url": "git+https://github.com/mochajs/mocha.git",
 				},
-				dist: {
-					tarball: "https://registry.npmjs.org/mocha/-/mocha-8.3.1.tgz",
-					fileCount: 75,
-					unpackedSize: 3071677,
+				"dist": {
+					"tarball": "https://registry.npmjs.org/mocha/-/mocha-8.3.1.tgz",
+					"fileCount": 75,
+					"unpackedSize": 3071677,
 				},
 			},
 			"8.3.2": {
-				name: "mocha",
-				version: "8.3.2",
-				description: "simple, flexible, fun test framework",
-				repository: {
-					type: "git",
-					url: "git+https://github.com/mochajs/mocha.git",
+				"name": "mocha",
+				"version": "8.3.2",
+				"description": "simple, flexible, fun test framework",
+				"repository": {
+					"type": "git",
+					"url": "git+https://github.com/mochajs/mocha.git",
 				},
-				dist: {
-					tarball: "https://registry.npmjs.org/mocha/-/mocha-8.3.2.tgz",
-					fileCount: 75,
-					unpackedSize: 3072626,
+				"dist": {
+					"tarball": "https://registry.npmjs.org/mocha/-/mocha-8.3.2.tgz",
+					"fileCount": 75,
+					"unpackedSize": 3072626,
 				},
 			},
 			"8.4.0": {
-				name: "mocha",
-				version: "8.4.0",
-				description: "simple, flexible, fun test framework",
-				repository: {
-					type: "git",
-					url: "git+https://github.com/mochajs/mocha.git",
+				"name": "mocha",
+				"version": "8.4.0",
+				"description": "simple, flexible, fun test framework",
+				"repository": {
+					"type": "git",
+					"url": "git+https://github.com/mochajs/mocha.git",
 				},
-				dist: {
-					tarball: "https://registry.npmjs.org/mocha/-/mocha-8.4.0.tgz",
-					fileCount: 75,
-					unpackedSize: 3069049,
+				"dist": {
+					"tarball": "https://registry.npmjs.org/mocha/-/mocha-8.4.0.tgz",
+					"fileCount": 75,
+					"unpackedSize": 3069049,
 				},
@@ -599,0 +659,0 @@ },

test/endToEnd.test.js

@@ -118,2 +118,4 @@ import assert from 'node:assert';
 			remoteVersion: "5.7.1",
+			latestRemoteVersion: '7.3.7',
+			latestRemoteModified: '2022-07-25T16:10:58.611Z',
 			installedVersion: "5.4.1",
@@ -120,0 +122,0 @@ definedVersion: "^5.0.0",

test/fixture/all-fields/license-report-config.json

@@ -14,4 +14,6 @@ {
 			"definedVersion",
+			"latestRemoteVersion",
+			"latestRemoteModified",
 			"author"
     ]
 }

test/fixture/expectedOutput.js

@@ -0,4 +1,7 @@
+import path from 'node:path';
+
 import got from 'got';
 import semver from 'semver';
 import createDebugMessages from 'debug';
+
 import config from '../../lib/config.js';
@@ -17,3 +20,3 @@
 	dependency.remoteVersion = 'n/a'
-	let uri = config.registry + dependency.name
+	let uri = path.join(config.registry, dependency.name)
 
@@ -20,0 +23,0 @@ debug('addRemoteVersion - REQUEST %s', uri)

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Major refactor

Supply chain risk

Package has recently undergone a major refactor. It may be unstable or indicate significant internal changes. Use caution when updating to versions that include significant changes.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

486648

increased by2.13%

Number of package files

51

increased by4.08%

Lines of code

2619

increased by7.64%

Number of lines in readme file

222

increased by11.56%

Number of medium supply chain risk alerts

0

decreased by-100%

Worsened metrics

Number of low supply chain risk alerts

7

increased by16.67%

Dependency changes

• Updatedgot@^12.3.0