manage-version - npm Package Compare versions

Comparing version 0.0.13 to 0.1.0

package.json

 {
   "name": "manage-version",
-  "version": "0.0.13",
+  "version": "0.1.0",
   "description": "Node command line tool for updating package.json version",
@@ -8,3 +8,4 @@ "main": "index.js",
   "scripts": {
-    "test": "echo \"Error: no test specified\" && exit 1"
+    "test": "mocha --compilers js:babel-core/register",
+    "test:watch": "mocha --compilers js:babel-core/register -w"
   },
@@ -24,4 +25,14 @@ "repository": {
     "commander": "^2.9.0",
+    "github": "^7.3.2",
+    "ramda": "^0.23.0",
     "semver": "^5.3.0"
+  },
+  "devDependencies": {
+    "babel-core": "^6.21.0",
+    "babel-preset-es2015": "^6.18.0",
+    "chai": "^3.5.0",
+    "chai-as-promised": "^6.0.0",
+    "mocha": "^3.2.0",
+    "sinon": "^1.17.7"
   }
 }

README.md

 # Manage Version
-A node command line tool for managing the version of a package.json using node semver package.
+[![Master
+Status](https://circleci.com/gh/procore/manage-version.png?circle-token=)](https://circleci.com/gh/procore/manage-version/tree/master)
+A node command line tool for managing the version of a package.json.
 
@@ -17,3 +19,16 @@ ## Command
 -h, --help   output usage information
--b, --branch <branch> source branch for evaluating next version
+-b, --branch [branch] source branch for evaluating next version
+-t, --token [access token] access token used for github
+-o --owner [owner] owner of github repo
+-r, --repo [repo] github repo
+-n, --number [pr number] number of pull request
 ```
+
+#### Examples
+```bash
+manage-version update minor
+```
+```bash
+manage-version update github -o procore -r manage-version -t $GITHUB_TOKEN -n ${CIRCLE_PULL_REQUEST##*/}
+```
+

New alerts

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 1 instance in 1 package

Fixed alerts

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 2 instances in 1 package

No tests

Quality

Package does not have any tests. This is a strong signal of a poorly maintained or low quality package.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

7065

increased by199.87%

Number of package files

9

increased by80%

Lines of code

153

increased by393.55%

Number of low quality alerts

2

decreased by-33.33%

Number of lines in readme file

34

increased by78.95%

Number of low supply chain risk alerts

3

decreased by-25%

Worsened metrics

Dependency count

5

increased by66.67%

Dev dependency count

6

increased byInfinity%

Dependency changes

• + Addedgithub@^7.3.2

• + Addedramda@^0.23.0

• + Addedagent-base@2.1.1(transitive)

• + Addeddebug@2.6.9(transitive)

• + Addedextend@3.0.2(transitive)

• + Addedfollow-redirects@0.0.7(transitive)

• + Addedgithub@7.3.2(transitive)

• + Addedhttps-proxy-agent@1.0.0(transitive)

• + Addedmime@1.6.0(transitive)

• + Addedms@2.0.0(transitive)

• + Addednetrc@0.1.4(transitive)

• + Addedramda@0.23.0(transitive)

• + Addedsemver@5.0.3(transitive)

• + Addedstream-consume@0.1.1(transitive)