rinore - npm Package Compare versions

Comparing version 1.1.1 to 1.2.0

lib/context.js

@@ -60,3 +60,3 @@ "use strict";
     // eslint-disable-next-line @typescript-eslint/no-var-requires
-    const loaded = require(moduleToLoad);
+    const loaded = require(require.resolve(moduleToLoad, { paths: [process.cwd()] }));
     const members = [];
@@ -63,0 +63,0 @@ if (name === '*') {

package.json

 {
   "name": "rinore",
-  "version": "1.1.1",
+  "version": "1.2.0",
   "description": "Rich Node.js REPL",
@@ -44,3 +44,3 @@ "engines": {
   "devDependencies": {
-    "@croquiscom/eslint-config": "^2.0.0",
+    "@croquiscom/eslint-config": "^2.3.2",
     "@types/bluebird": "^3.5.38",
@@ -51,17 +51,17 @@ "@types/chai": "^4.3.4",
     "@types/mocha": "^10.0.1",
-    "@types/node": "^18.11.11",
-    "@types/yargs": "^17.0.16",
+    "@types/node": "^18.11.18",
+    "@types/yargs": "^17.0.22",
     "chai": "^4.3.7",
     "coffeescript": "^2.7.0",
     "coveralls": "^3.1.1",
-    "eslint": "^8.29.0",
-    "husky": "^8.0.2",
+    "eslint": "^8.33.0",
+    "husky": "^8.0.3",
     "lint-staged": "^13.1.0",
-    "mocha": "^10.1.0",
+    "mocha": "^10.2.0",
     "nyc": "^15.1.0",
     "post-merge-install": "^0.4.0",
-    "prettier": "^2.8.0",
-    "rimraf": "^3.0.2",
+    "prettier": "^2.8.3",
+    "rimraf": "^4.1.2",
     "ts-node": "10.7",
-    "typescript": "^4.9.3"
+    "typescript": "^4.9.5"
   },
@@ -68,0 +68,0 @@ "nyc": {

New alerts

Dynamic require

Supply chain risk

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

41040

increased by0.11%

Worsened metrics

Number of low supply chain risk alerts

9

increased by12.5%

No dependency changes