mocha - npm Package Compare versions

Comparing version 3.3.0 to 3.4.1

lib/runnable.js

@@ -327,4 +327,7 @@ 'use strict';
   if (this.allowUncaught) {
-    callFn(this.fn);
-    done();
+    if (this.isPending()) {
+      done();
+    } else {
+      callFn(this.fn);
+    }
     return;
@@ -331,0 +334,0 @@ }

lib/runner.js

@@ -435,3 +435,5 @@ 'use strict';
   }
-
+  test.on('error', function (err) {
+    self.fail(test, err);
+  });
   if (this.allowUncaught) {
@@ -442,5 +444,2 @@ test.allowUncaught = true;
   try {
-    test.on('error', function (err) {
-      self.fail(test, err);
-    });
     test.run(fn);
@@ -447,0 +446,0 @@ } catch (err) {

package.json

 {
   "name": "mocha",
-  "version": "3.3.0",
+  "version": "3.4.1",
   "description": "simple, flexible, fun test framework",
@@ -306,3 +306,3 @@ "keywords": [
     "postcoverage": "istanbul-combine -d coverage -r lcov -r html coverage/reports/*/*.json",
-    "preversion": "make test && make mocha.js && git add mocha.js"
+    "preversion": "make test && rm mocha.js && make mocha.js && git add mocha.js"
   },
@@ -327,2 +327,7 @@ "dependencies": {
     "coveralls": "^2.11.15",
+    "eslint": "^3.11.1",
+    "eslint-config-semistandard": "^7.0.0",
+    "eslint-config-standard": "^6.2.1",
+    "eslint-plugin-promise": "^3.4.0",
+    "eslint-plugin-standard": "2.0.1",
     "expect.js": "^0.3.1",
@@ -339,6 +344,4 @@ "istanbul-combine": "^0.3.0",
     "nyc": "^10.0.0",
-    "os-name": "^2.0.1",
     "phantomjs": "1.9.8",
     "rimraf": "^2.5.2",
-    "semistandard": "^9.2.1",
     "should": "^11.1.1",
@@ -376,9 +379,3 @@ "through2": "^2.0.1",
     ]
-  },
-  "semistandard": {
-    "ignore": [
-      "/mocha.js",
-      "/lib/to-iso-string/**/*.js"
-    ]
   }
 }

README.md

@@ -42,2 +42,3 @@ # Mocha needs YOU!
 [![Coverage Status](https://coveralls.io/repos/github/mochajs/mocha/badge.svg)](https://coveralls.io/github/mochajs/mocha)
+[![FOSSA Status](https://app.fossa.io/api/projects/git%2Bhttps%3A%2F%2Fgithub.com%2Fmochajs%2Fmocha.svg?type=shield)](https://app.fossa.io/projects/git%2Bhttps%3A%2F%2Fgithub.com%2Fmochajs%2Fmocha?ref=badge_shield)
 [![Gitter](https://badges.gitter.im/Join%20Chat.svg)](https://gitter.im/mochajs/mocha?utm_source=badge&utm_medium=badge&utm_campaign=pr-badge&utm_content=badge)
@@ -122,1 +123,3 @@ [![OpenCollective](https://opencollective.com/mochajs/backers/badge.svg)](#backers)
 [MIT](LICENSE)
+
+[![FOSSA Status](https://app.fossa.io/api/projects/git%2Bhttps%3A%2F%2Fgithub.com%2Fmochajs%2Fmocha.svg?type=large)](https://app.fossa.io/projects/git%2Bhttps%3A%2F%2Fgithub.com%2Fmochajs%2Fmocha?ref=badge_large)

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

New author

Supply chain risk

A new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Dynamic require

Supply chain risk

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

716809

increased by3.92%

Number of package files

54

increased by1.89%

Lines of code

20303

increased by2.87%

Number of lines in readme file

124

increased by2.48%

Number of low supply chain risk alerts

31

decreased by-8.82%

Worsened metrics

Dev dependency count

25

increased by13.64%

Number of medium supply chain risk alerts

2

increased by100%

No dependency changes