module-deps - npm Package Compare versions

Comparing version 3.7.8 to 3.7.10

index.js

@@ -149,7 +149,8 @@ var fs = require('fs');
     
-    var pkgdir;
     parent.packageFilter = function (p, x) {
-        pkgdir = path.dirname(x);
-        if (opts.packageFilter) return opts.packageFilter(p, x);
-        else return p;
+        var pkgdir = path.dirname(x);
+        if (opts.packageFilter) p = opts.packageFilter(p, x);
+        p.__dirname = pkgdir;
+
+        return p;
     };
@@ -167,3 +168,2 @@
         
-        if (pkg && pkgdir) pkg.__dirname = pkgdir;
         if (!pkg || !pkg.__dirname) {
@@ -337,3 +337,3 @@ self.lookupPackage(file, function (err, p) {
                 rec.source = body.toString('utf8');
-                fromSource(rec.source);
+                fromSource(file, rec.source, pkg);
             }));
@@ -360,3 +360,3 @@ return ts.end(rec.source);
                 rec.source = body.toString('utf8');
-                fromSource(rec.source);
+                fromSource(file, rec.source, pkg);
             }));
@@ -374,20 +374,14 @@ return ts.end(rec.source);
             .pipe(concat(function (body) {
-                fromSource(body.toString('utf8'));
+                fromSource(file, body.toString('utf8'), pkg);
             }))
         ;
-        
-        function fromSource (src) {
-            var deps = rec.noparse ? [] : self.parseDeps(file, src);
-            if (deps) fromDeps(file, src, pkg, deps);
-        }
     });
+
+    function fromSource (file, src, pkg) {
+        var deps = rec.noparse ? [] : self.parseDeps(file, src);
+        if (deps) fromDeps(file, src, pkg, deps);
+    }
     
     function fromDeps (file, src, pkg, deps) {
         var p = deps.length;
-        var current = {
-            id: file,
-            filename: file,
-            paths: self.paths,
-            package: pkg
-        };
         var resolved = {};
@@ -405,2 +399,8 @@
                 }
+                var current = {
+                    id: file,
+                    filename: file,
+                    paths: self.paths,
+                    package: pkg
+                };
                 self.walk(id, current, function (err, r) {
@@ -407,0 +407,0 @@ resolved[id] = r;

package.json

 {
   "name": "module-deps",
-  "version": "3.7.8",
+  "version": "3.7.10",
   "description": "walk the dependency graph to generate json output that can be fed into browser-pack",
@@ -5,0 +5,0 @@ "main": "index.js",

test/pkg.js

 var mdeps = require('../');
 var test = require('tape');
 var path = require('path');
+var fs = require('fs');
 
-var pkg = require('./pkg/package.json');
-pkg.__dirname = path.join(__dirname, '/pkg');
+var dirname = path.join(__dirname, '/pkg');
 
 test('pkg', function (t) {
-    t.plan(1);
+    t.plan(4);
     
     var d = mdeps();
     d.on('package', function (pkg_) {
+        var pkg = JSON.parse(fs.readFileSync(dirname + pkg_.dir + '/package.json'));
+        pkg.__dirname = dirname + pkg_.dir;
+
         t.deepEqual(pkg_, pkg);
@@ -14,0 +17,0 @@ });

test/pkg/main.js

@@ -1,1 +0,2 @@
-console.log(555)
+require('pkga');
+require('pkgb');

test/pkg/package.json

@@ -1,1 +0,4 @@
-{ "beep": "boop" }
+{
+  "dir": "",
+  "main": "index.js"
+}

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

New author

Supply chain risk

A new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

60745

increased by0.29%

Lines of code

1604

increased by0.12%

Number of medium supply chain risk alerts

18

decreased by-5.26%

Worsened metrics

Number of low supply chain risk alerts

15

increased by7.14%

No dependency changes