snyk-delta - npm Package Compare versions

Comparing version 1.0.13 to 1.0.14

dist/utils/utils.js

@@ -5,3 +5,5 @@ "use strict";
 const yargs = require('yargs');
-const pkgJSON = require(require('app-root-path').resolve('package.json'));
+const fs = require("fs");
+const path = require("path");
+//const pkgJSON = require(require('app-root-path').resolve('package.json'))
 const chalk = require("chalk");
@@ -18,2 +20,4 @@ const inputError_1 = require("../customErrors/inputError");
 const init = () => {
+    const pkgJSONPath = fs.existsSync(__dirname + '/../../../package.json') ? __dirname + '/../../../package.json' : path.dirname(path.dirname(__dirname)) + '/package.json';
+    const pkgJSON = JSON.parse(fs.readFileSync(pkgJSONPath).toString());
     const argv = yargs
@@ -20,0 +24,0 @@ .usage('============================')

package.json

@@ -5,3 +5,3 @@ {
   "main": "dist/index.js",
-  "version": "1.0.13",
+  "version": "1.0.14",
   "bin": {
@@ -8,0 +8,0 @@ "snyk-delta": "dist/index.js"

New alerts

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

Fixed alerts

Major refactor

Supply chain risk

Package has recently undergone a major refactor. It may be unstable or indicate significant internal changes. Use caution when updating to versions that include significant changes.

Found 1 instance in 1 package

Dynamic require

Supply chain risk

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

64804

increased by0.83%

Lines of code

761

increased by0.53%

Number of medium supply chain risk alerts

0

decreased by-100%

No dependency changes