npm-pick-manifest - npm Package Compare versions

Comparing version 6.1.0 to 6.1.1

CHANGELOG.md

 # Changelog
 
-All notable changes to this project will be documented in this file. See [standard-version](https://github.com/conventional-changelog/standard-version) for commit guidelines.
+All notable changes to this project will be documented in this file. 
 
+## [6.1.1](https://github.com/npm/npm-pick-manifest/compare/v6.0.0...v6.1.0) (2020-04-07)
+
+* normalize package bins in returned manifest
+
 ## [6.1.0](https://github.com/npm/npm-pick-manifest/compare/v6.0.0...v6.1.0) (2020-04-07)
@@ -6,0 +10,0 @@

index.js

@@ -6,2 +6,3 @@ 'use strict'
 const { checkEngine } = require('npm-install-checks')
+const normalizeBin = require('npm-normalize-package-bin')
 
@@ -187,3 +188,4 @@ const engineOk = (manifest, npmVersion, nodeVersion) => {
 module.exports = (packument, wanted, opts = {}) => {
-  const picked = pickManifest(packument, wanted, opts)
+  const mani = pickManifest(packument, wanted, opts)
+  const picked = mani && normalizeBin(mani)
   const policyRestrictions = packument.policyRestrictions
@@ -190,0 +192,0 @@ const restricted = (policyRestrictions && policyRestrictions.versions) || {}

package.json

 {
   "name": "npm-pick-manifest",
-  "version": "6.1.0",
+  "version": "6.1.1",
   "description": "Resolves a matching manifest from a package metadata document according to standard npm semver resolution rules.",
@@ -12,8 +12,7 @@ "main": "index.js",
     "lint": "standard",
-    "postrelease": "npm publish",
+    "test": "tap",
     "posttest": "npm run lint",
-    "prepublishOnly": "git push --follow-tags",
-    "prerelease": "npm t",
-    "release": "standard-version -s",
-    "test": "tap"
+    "preversion": "npm test",
+    "postversion": "npm publish",
+    "prepublishOnly": "git push origin --follow-tags"
   },
@@ -34,9 +33,9 @@ "repository": "https://github.com/npm/npm-pick-manifest",
     "npm-install-checks": "^4.0.0",
-    "npm-package-arg": "^8.0.0",
-    "semver": "^7.0.0"
+    "npm-normalize-package-bin": "^1.0.1",
+    "npm-package-arg": "^8.1.2",
+    "semver": "^7.3.4"
   },
   "devDependencies": {
     "standard": "^14.3.1",
-    "standard-version": "^7.0.1",
-    "tap": "^14.10.2"
+    "tap": "^14.11.0"
   },
@@ -43,0 +42,0 @@ "tap": {

New alerts

New author

Supply chain risk

A new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

22587

increased by0.51%

Dev dependency count

2

decreased by-33.33%

Lines of code

189

increased by1.07%

Worsened metrics

Dependency count

4

increased by33.33%

Number of medium supply chain risk alerts

1

increased byInfinity%

Dependency changes

• + Addednpm-normalize-package-bin@^1.0.1

• + Addednpm-normalize-package-bin@1.0.1(transitive)

• Updatednpm-package-arg@^8.1.2

• Updatedsemver@^7.3.4