serverless-plugin-include-dependencies - npm Package Compare versions

Comparing version 3.2.0 to 3.2.1

get-dependency-list.js

@@ -46,3 +46,10 @@ 'use strict';
         }
-        throw new Error(`[serverless-plugin-include-dependencies]: Could not find ${moduleName}`);
+        try {
+          // this resolves the requested import also against any set up NODE_PATH extensions, etc.
+          const resolved = require.resolve(name);
+          localFilesToProcess.push(resolved);
+          return;
+        } catch(e) {
+          throw new Error(`[serverless-plugin-include-dependencies]: Could not find ${moduleName}`);
+        }
       }
@@ -49,0 +56,0 @@ throw e;

package.json

 {
   "name": "serverless-plugin-include-dependencies",
-  "version": "3.2.0",
+  "version": "3.2.1",
   "engines": {
@@ -20,6 +20,5 @@ "node": ">=4.0"
   "scripts": {
-    "test": "nyc --all ava",
+    "test": "NODE_PATH=\"__tests__/fixtures/additional_node_path:${NODE_PATH:-}\" nyc --all ava",
     "posttest": "eslint .",
-    "preversion": "update contributors",
-    "prepublish": "git push origin master; git push origin --tags"
+    "preversion": "update contributors"
   },
@@ -57,2 +56,3 @@ "devDependencies": {
     "Nicole Simone (https://github.com/nsimone)",
+    "Joscha Feth (http://www.feth.com)",
     "DIALLO Mamadou Bobo (https://github.com/ecstasy2)",
@@ -59,0 +59,0 @@ "Rick (https://github.com/RickvdP)",

New alerts

Dynamic require

Supply chain risk

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

12112

increased by2.56%

Lines of code

220

increased by3.29%

Worsened metrics

Number of low supply chain risk alerts

3

increased by50%

No dependency changes