Socket
Socket
Sign inDemoInstall

npm-packlist

Package Overview
Dependencies
14
Maintainers
5
Versions
62
Alerts
File Explorer

Advanced tools

Install Socket

Detect and block malicious and high-risk dependencies

Install

Comparing version 2.1.1 to 2.1.2

18

index.js

@@ -86,9 +86,19 @@ 'use strict'

const parentName = path.basename(path.dirname(opt.path))
opt.follow =
dirName === 'node_modules' ||
(parentName === 'node_modules' && /^@/.test(dirName))
// only follow links in the root node_modules folder, because if those
// folders are included, it's because they're bundled, and bundles
// should include the contents, not the symlinks themselves.
// This regexp tests to see that we're either a node_modules folder,
// or a @scope within a node_modules folder, in the root's node_modules
// hierarchy (ie, not in test/foo/node_modules/ or something).
const followRe = /^(?:\/node_modules\/(?:@[^\/]+\/[^\/]+|[^\/]+)\/)*\/node_modules(?:\/@[^\/]+)?$/
const rootPath = opt.parent ? opt.parent.root : opt.path
const followTestPath = opt.path.replace(/\\/g, '/').substr(rootPath.length)
opt.follow = followRe.test(followTestPath)
super(opt)
// ignore a bunch of things by default at the root level.
// also ignore anything in node_modules, except bundled dependencies
// also ignore anything in the main project node_modules hierarchy,
// except bundled dependencies
if (!this.parent) {

@@ -95,0 +105,0 @@ this.bundled = opt.bundled || []

{
"name": "npm-packlist",
"version": "2.1.1",
"version": "2.1.2",
"description": "Get a list of the files to add from a folder into an npm package",

@@ -23,3 +23,3 @@ "directories": {

"require-inject": "^1.4.4",
"tap": "^14.10.6"
"tap": "^14.10.7"
},

@@ -26,0 +26,0 @@ "scripts": {

SocketSocket SOC 2 Logo

Product

  • Package Alerts
  • Integrations
  • Docs
  • Pricing
  • FAQ
  • Roadmap

Stay in touch

Get open source security insights delivered straight into your inbox.


  • Terms
  • Privacy
  • Security

Made with ⚡️ by Socket Inc