semantic-release - npm Package Compare versions

Comparing version 3.0.1 to 3.0.2

package.json

 {
   "name": "semantic-release",
   "description": "automated semver compliant package publishing",
-  "version": "3.0.1",
+  "version": "3.0.2",
   "author": "Stephan Bönnemann <[e-mail]>",
-  "bin": "./bin/semantic-release",
+  "bin": "./bin/semantic-release.js",
   "bugs": {
@@ -14,3 +14,2 @@ "url": "https://github.com/boennemann/semantic-release/issues"
     "error-first-handler": "^1.0.1",
-    "git-node": "^0.1.1",
     "github": "^0.2.3",
@@ -58,5 +57,5 @@ "github-url-from-git": "^1.4.0",
   "scripts": {
-    "postpublish": "./bin/semantic-release post",
+    "postpublish": "./bin/semantic-release.js post",
     "posttest": "./bin/post-test",
-    "prepublish": "./bin/semantic-release pre",
+    "prepublish": "./bin/semantic-release.js pre",
     "pretest": "./bin/pre-test",
@@ -63,0 +62,0 @@ "test": "standard && node tests | tap-spec"

src/post.js

 'use strict'
 
+var exec = require('child_process').exec
 var readFile = require('fs').readFileSync
@@ -7,3 +8,2 @@ var url = require('url')
 var changelog = require('conventional-changelog')
-var git = require('git-node')
 var GitHubApi = require('github')
@@ -35,3 +35,3 @@ var parseSlug = require('parse-github-repo-url')
   }, efh(cb)(function (log) {
-    git.repo('./.git').loadAs('commit', 'HEAD', efh(cb)(function (commit, hash) {
+    exec('git rev-parse HEAD', efh(cb)(function (hash) {
       var ghRepo = parseSlug(repository)
@@ -38,0 +38,0 @@ var release = {

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 6 instances in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Improved metrics

Dependency count

10

decreased by-9.09%

Lines of code

558

increased by12.73%

Worsened metrics

Total package byte prevSize

31564

decreased by-0.1%

Number of low supply chain risk alerts

15

increased by87.5%

Number of medium supply chain risk alerts

4

increased by33.33%

Dependency changes

• - Removedgit-node@^0.1.1

• - Removedasn1@0.1.11(transitive)

• - Removedgit-fs-db@0.2.0(transitive)

• - Removedgit-net@0.0.4(transitive)

• - Removedgit-node@0.1.1(transitive)

• - Removedgit-node-platform@0.1.4(transitive)

• - Removedgit-pack-codec@0.0.1(transitive)

• - Removedjs-git@0.5.4(transitive)

• - Removedpush-to-pull@0.1.0(transitive)

• - Removedssh2@0.2.25(transitive)

• - Removedstreamsearch@0.1.2(transitive)

• - Removedvarint@0.0.3(transitive)