resolve - npm Package Compare versions

Comparing version 1.22.6 to 1.22.7

package.json

 {
 	"name": "resolve",
 	"description": "resolve like require.resolve() on behalf of files asynchronously and synchronously",
-	"version": "1.22.6",
+	"version": "1.22.7",
 	"repository": {
@@ -48,3 +48,3 @@ "type": "git",
 		"tap": "0.4.13",
-		"tape": "^5.6.6",
+		"tape": "^5.7.0",
 		"tmp": "^0.0.31"
@@ -69,5 +69,6 @@ },
 			".github/workflows",
-			"appveyor.yml"
+			"appveyor.yml",
+			"test/resolver/malformed_package_json"
 		]
 	}
 }

test/resolver_sync.js

@@ -670,6 +670,7 @@ var path = require('path');
 
-test('malformed package.json', function (t) {
+var malformedDir = path.join(__dirname, 'resolver/malformed_package_json');
+test('malformed package.json', { skip: !fs.existsSync(malformedDir) }, function (t) {
     t.plan(5 + (requireResolveSupportsPaths ? 1 : 0));
 
-    var basedir = path.join(__dirname, 'resolver/malformed_package_json');
+    var basedir = malformedDir;
     var expected = path.join(basedir, 'index.js');
@@ -676,0 +677,0 @@

test/resolver.js

 var path = require('path');
+var fs = require('fs');
 var test = require('tape');
@@ -542,3 +543,4 @@ var resolve = require('../');
 
-test('malformed package.json', function (t) {
+var malformedDir = path.join(__dirname, 'resolver/malformed_package_json');
+test('malformed package.json', { skip: !fs.existsSync(malformedDir) }, function (t) {
     /* eslint operator-linebreak: ["error", "before"], function-paren-newline: "off" */
@@ -550,3 +552,3 @@ t.plan(
 
-    var basedir = path.join(__dirname, 'resolver/malformed_package_json');
+    var basedir = malformedDir;
     var expected = path.join(basedir, 'index.js');
@@ -553,0 +555,0 @@

New alerts

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 1 instance in 1 package

Fixed alerts

Nonpermissive License

License

(Experimental) A package's licensing information has fine-grained problems

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 8 instances in 1 package

Improved metrics

Total package byte prevSize

145086

increased by0.15%

Number of medium license alerts

0

decreased by-100%

Lines of code

3285

increased by0.09%

Worsened metrics

Number of package files

97

decreased by-2.02%

Number of low supply chain risk alerts

35

increased by34.62%

No dependency changes