read-installed
Advanced tools
read-installed - npm Package Compare versions
Comparing version 4.0.0 to 4.0.1
| { | ||
| "name": "read-installed", | ||
| "description": "Read all the installed packages in a folder, and return a tree structure with all the data.", | ||
| "version": "4.0.0", | ||
| "version": "4.0.1", | ||
| "repository": { | ||
@@ -29,4 +29,4 @@ "type": "git", | ||
| "rimraf": "^2.2.8", | ||
| "tap": "~0.4.8" | ||
| "tap": "^1.2.0" | ||
| } | ||
| } |
@@ -59,3 +59,3 @@ | ||
| if parentobj is null, and no package.json | ||
| obj = {dependencies:{<installed>:"*"}} | ||
| obj = {dependencies:{<installed>:ANY}} | ||
| deps = Object.keys(obj.dependencies) | ||
@@ -109,2 +109,6 @@ obj.path = packagefolder | ||
| // Sentinel catch-all version constraint used when a dependency is not | ||
| // listed in the package.json file. | ||
| var ANY = {} | ||
| module.exports = readInstalled | ||
@@ -195,3 +199,3 @@ | ||
| obj = {dependencies:{}, path:folder} | ||
| installed.forEach(function (i) { obj.dependencies[i] = "*" }) | ||
| installed.forEach(function (i) { obj.dependencies[i] = ANY }) | ||
| } | ||
@@ -205,2 +209,10 @@ if (name && obj.name !== name) obj.invalid = true | ||
| if (reqver === ANY) { | ||
| // We were unable to determine the required version of this | ||
| // dependency from the package.json file, but we now know its actual | ||
| // version, so treat that version as the required version to avoid | ||
| // marking the dependency as invalid below. See #40. | ||
| reqver = obj.version; | ||
| } | ||
| // "foo":"http://blah" and "foo":"latest" are always presumed valid | ||
@@ -207,0 +219,0 @@ if (reqver |
New alerts
License Policy Violation
LicenseThis package is not allowed per your license policy. Review the package's license to ensure compliance.
Found 1 instance in 1 package
Fixed alerts
License Policy Violation
LicenseThis package is not allowed per your license policy. Review the package's license to ensure compliance.
Found 1 instance in 1 package
New author
Supply chain riskA new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.
Found 1 instance in 1 package
Improved metrics
- Total package byte prevSize
- increased by4.12%
27444
- Number of package files
- increased by8.7%
25
- Lines of code
- increased by3.43%
724
- Number of medium supply chain risk alerts
- decreased by-100%
0