pm2 - npm Package Compare versions

Comparing version 3.5.1 to 3.5.2

lib/Client.js

@@ -171,2 +171,7 @@ /**
   if (!process.env.PM2_PROGRAMMATIC && !fs.existsSync(path.join(opts.PM2_HOME, 'touch'))) {
+    var vCheck = require('./VersionCheck.js')
+    vCheck({
+      state: 'install',
+      version: pkg.version
+    })
     var dt = fs.readFileSync(path.join(__dirname, opts.PM2_BANNER));
@@ -173,0 +178,0 @@ console.log(dt.toString());

lib/Worker.js

@@ -12,2 +12,4 @@ /**
 var cronJob = require('cron').CronJob
+var vCheck = require('./VersionCheck.js')
+var pkg = require('../package.json')
 
@@ -185,2 +187,9 @@ module.exports = function(God) {
     timer = setInterval(wrappedTasks, cst.WORKER_INTERVAL);
+
+    setInterval(() => {
+      vCheck({
+        state: 'check',
+        version: pkg.version
+      })
+    }, 1000 * 60 * 60 * 24)
   };
@@ -187,0 +196,0 @@

package.json

 {
   "name": "pm2",
   "preferGlobal": true,
-  "version": "3.5.1",
+  "version": "3.5.2",
   "engines": {
@@ -164,2 +164,3 @@ "node": ">=6.0.0"
     "@pm2/js-api": "^0.5.43",
+    "@pm2/pm2-version-check": "latest",
     "async": "^2.6.1",
@@ -166,0 +167,0 @@ "blessed": "^0.1.81",

New alerts

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 1 instance in 1 package

Fixed alerts

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 6 instances in 1 package

Improved metrics

Total package byte prevSize

758419

Lines of code

15902

increased by0.01%

Worsened metrics

Dependency count

31

increased by3.33%

Number of low supply chain risk alerts

351

increased by7.67%

Dependency changes

• + Added@pm2/pm2-version-check@latest

• + Added@pm2/pm2-version-check@1.0.4(transitive)