semver - npm Package Compare versions

Comparing version 7.3.6 to 7.3.7

bin/semver.js

@@ -40,4 +40,5 @@ #!/usr/bin/env node
     if (indexOfEqualSign !== -1) {
+      const value = a.slice(indexOfEqualSign + 1)
       a = a.slice(0, indexOfEqualSign)
-      argv.unshift(a.slice(indexOfEqualSign + 1))
+      argv.unshift(value)
     }
@@ -44,0 +45,0 @@ switch (a) {

classes/semver.js

@@ -268,3 +268,3 @@ const debug = require('../internal/debug')
           // 1.2.0-beta.fooblz or 1.2.0-beta bumps to 1.2.0-beta.0
-          if (this.prerelease[0] === identifier) {
+          if (compareIdentifiers(this.prerelease[0], identifier) === 0) {
             if (isNaN(this.prerelease[1])) {
@@ -271,0 +271,0 @@ this.prerelease = [identifier, 0]

functions/inc.js

@@ -10,3 +10,6 @@ const SemVer = require('../classes/semver')
   try {
-    return new SemVer(version, options).inc(release, identifier).version
+    return new SemVer(
+      version instanceof SemVer ? version.version : version,
+      options
+    ).inc(release, identifier).version
   } catch (er) {
@@ -13,0 +16,0 @@ return null

package.json

 {
   "name": "semver",
-  "version": "7.3.6",
+  "version": "7.3.7",
   "description": "The semantic version parser used by npm.",
@@ -21,3 +21,3 @@ "main": "index.js",
     "@npmcli/eslint-config": "^3.0.1",
-    "@npmcli/template-oss": "3.2.2",
+    "@npmcli/template-oss": "3.3.2",
     "tap": "^16.0.0"
@@ -48,6 +48,6 @@ },
   "engines": {
-    "node": "^10.0.0 || ^12.0.0 || ^14.0.0 || >=16.0.0"
+    "node": ">=10"
   },
   "dependencies": {
-    "lru-cache": "^7.4.0"
+    "lru-cache": "^6.0.0"
   },
@@ -57,3 +57,4 @@ "author": "GitHub Inc.",
     "//@npmcli/template-oss": "This file is partially managed by @npmcli/template-oss. Edits may be overwritten.",
-    "version": "3.2.2",
+    "version": "3.3.2",
+    "engines": ">=10",
     "ciVersions": [
@@ -60,0 +61,0 @@ "10.0.0",

Fixed alerts

New author

Supply chain risk

A new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

87418

increased by0.11%

Lines of code

1925

increased by0.21%

Number of medium supply chain risk alerts

0

decreased by-100%

Dependency changes

• + Addedlru-cache@6.0.0(transitive)

• + Addedyallist@4.0.0(transitive)

• - Removedlru-cache@7.18.3(transitive)

• Updatedlru-cache@^6.0.0