require-one-of
Advanced tools
Comparing version 1.0.1 to 1.0.2
@@ -5,2 +5,13 @@ # Change Log | ||
<a name="1.0.2"></a> | ||
## [1.0.2](https://github.com/Kikobeats/require-one-of/compare/v1.0.1...v1.0.2) (2019-01-14) | ||
### Bug Fixes | ||
* ensure to resolve starting from cwd ([9b0a877](https://github.com/Kikobeats/require-one-of/commit/9b0a877)) | ||
* use minus name ([610ac28](https://github.com/Kikobeats/require-one-of/commit/610ac28)) | ||
<a name="1.0.1"></a> | ||
@@ -7,0 +18,0 @@ ## [1.0.1](https://github.com/Kikobeats/require-one-of/compare/v1.0.0...v1.0.1) (2019-01-14) |
@@ -5,3 +5,3 @@ { | ||
"homepage": "https://documentup.com/Kikobeats/require-one-of", | ||
"version": "1.0.1", | ||
"version": "1.0.2", | ||
"main": "src/index.js", | ||
@@ -26,2 +26,5 @@ "author": { | ||
], | ||
"dependencies": { | ||
"import-from": "~2.1.0" | ||
}, | ||
"devDependencies": { | ||
@@ -28,0 +31,0 @@ "@commitlint/cli": "latest", |
'use strict' | ||
const resolveFrom = require('resolve-from') | ||
const assert = require('assert') | ||
const CACHE = {} | ||
const resolveCwd = resolveFrom.silent.bind(resolveFrom, process.cwd()) | ||
const load = module => { | ||
try { | ||
return require(module) | ||
} catch (e) { | ||
return null | ||
} | ||
} | ||
const cache = {} | ||
@@ -24,4 +19,8 @@ const createError = modules => | ||
assert(Array.isArray(modules), 'Need to provide a collection') | ||
const module = modules.find(load) | ||
if (module) return module | ||
for (const module of modules) { | ||
const modulePath = resolveCwd(module) | ||
if (modulePath) return require(modulePath) | ||
} | ||
throw error(modules) | ||
@@ -32,5 +31,5 @@ } | ||
const key = modules.join(',') | ||
return CACHE[key] || (CACHE[key] = find(modules, fn)) | ||
return cache[key] || (cache[key] = find(modules, fn)) | ||
} | ||
module.exports.CACHE = CACHE | ||
module.exports.cache = cache |
Dynamic require
Supply chain riskDynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.
Found 1 instance in 1 package
Dynamic require
Supply chain riskDynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.
Found 1 instance in 1 package
7591
1
24
+ Addedimport-from@~2.1.0
+ Addedimport-from@2.1.0(transitive)
+ Addedresolve-from@3.0.0(transitive)