npm-packlist - npm Package Compare versions

Comparing version 8.0.0 to 8.0.1

lib/index.js

@@ -301,2 +301,3 @@ 'use strict'
       '/node_modules',
+      '.npmrc',
       '/package-lock.json',
@@ -311,8 +312,6 @@ '/yarn.lock',
         // invert the rule because these are things we want to include
-        if (file.startsWith('/')) {
+        if (file.startsWith('./')) {
           file = file.slice(1)
-        } else if (file.startsWith('./')) {
-          file = file.slice(2)
         } else if (file.endsWith('/*')) {
-          file = file.slice(0, -2)
+          file = file.slice(0, -1)
         }
@@ -331,3 +330,3 @@ const inverse = `!${file}`
             strict.unshift(inverse)
-            this.requiredFiles.push(file)
+            this.requiredFiles.push(file.startsWith('/') ? file.slice(1) : file)
           } else if (stat.isDirectory()) {
@@ -334,0 +333,0 @@ // otherwise, it's a default ignore, and since we got here we know it's not a pattern

package.json

 {
   "name": "npm-packlist",
-  "version": "8.0.0",
+  "version": "8.0.1",
   "description": "Get a list of the files to add from a folder into an npm package",
@@ -10,3 +10,3 @@ "directories": {
   "dependencies": {
-    "ignore-walk": "^6.0.0"
+    "ignore-walk": "^6.0.4"
   },
@@ -22,3 +22,3 @@ "author": "GitHub Inc.",
     "@npmcli/eslint-config": "^4.0.0",
-    "@npmcli/template-oss": "4.18.0",
+    "@npmcli/template-oss": "4.21.2",
     "mutate-fs": "^2.1.1",
@@ -33,3 +33,3 @@ "tap": "^16.0.1"
     "eslint": "eslint",
-    "lint": "eslint \"**/*.js\"",
+    "lint": "eslint \"**/*.{js,cjs,ts,mjs,jsx,tsx}\"",
     "lintfix": "npm run lint -- --fix",
@@ -61,5 +61,5 @@ "npmclilint": "npmcli-lint",
     "//@npmcli/template-oss": "This file is partially managed by @npmcli/template-oss. Edits may be overwritten.",
-    "version": "4.18.0",
+    "version": "4.21.2",
     "publish": true
   }
 }

Fixed alerts

New author

Supply chain risk

A new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

23057

increased by0.01%

Number of medium supply chain risk alerts

0

decreased by-100%

Worsened metrics

Lines of code

422

decreased by-0.24%

Dependency changes

• Updatedignore-walk@^6.0.4