loose-envify - npm Package Compare versions

Comparing version 1.1.0 to 1.2.0

package.json

 {
   "name": "loose-envify",
-  "version": "1.1.0",
+  "version": "1.2.0",
   "description": "Fast (and loose) selective `process.env` replacer using js-tokens instead of an AST",
@@ -17,2 +17,5 @@ "keywords": [
   "author": "Andres Suarez <[e-mail]>",
+  "bin": {
+    "loose-envify": "cli.js"
+  },
   "repository": {
@@ -19,0 +22,0 @@ "type": "git",

README.md

@@ -23,3 +23,3 @@ # loose-envify
 
-loose-envify has the exact same interface as [envify](https://github.com/hughsk/envify).
+loose-envify has the exact same interface as [envify](https://github.com/hughsk/envify), including the CLI.
 
@@ -26,0 +26,0 @@ ## Benchmark

replace.js

@@ -13,3 +13,3 @@ 'use strict';
 
-  var out = '';
+  var out = [];
   var purge = envs.some(function(env) {
@@ -34,3 +34,3 @@ return env._ && env._.indexOf('purge') !== -1;
           typeof replacement === 'string') {
-        out += replacement;
+        out.push(replacement);
         i += 4;
@@ -40,6 +40,6 @@ continue;
     }
-    out += parts[i];
+    out.push(parts[i]);
   }
 
-  return out;
+  return out.join('');
 }
@@ -46,0 +46,0 @@

New alerts

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

4655

increased by9.94%

Number of package files

8

increased by14.29%

Lines of code

101

increased by14.77%

Worsened metrics

Number of low supply chain risk alerts

3

increased by50%

No dependency changes