snyk-go-plugin - npm Package Compare versions

Comparing version 1.18.0 to 1.18.1

dist/sub-process.js

@@ -6,7 +6,2 @@ "use strict";
 function execute(command, args, options) {
-    if (process.env.TERM_PROGRAM === 'vscode') {
-        throw new Error('running go subprocesses in VS Code seems to be broken!');
-        // Namely, it seems that no data is collected from stdout/stderr streams.
-        // Even just running `go version > 1.txt` in the terminal produces an empty file.
-    }
     const spawnOptions = { shell: true };
@@ -13,0 +8,0 @@ if (options === null || options === void 0 ? void 0 : options.cwd) {

lib/sub-process.ts

 import * as childProcess from 'child_process';
 
 export function execute(command: string, args: string[], options?: { cwd?: string, env?: any }): Promise<string> {
-
-  if (process.env.TERM_PROGRAM === 'vscode') {
-    throw new Error('running go subprocesses in VS Code seems to be broken!');
-    // Namely, it seems that no data is collected from stdout/stderr streams.
-    // Even just running `go version > 1.txt` in the terminal produces an empty file.
-  }
-
   const spawnOptions: childProcess.SpawnOptions = {shell: true};
@@ -12,0 +5,0 @@ if (options?.cwd) {

package.json

@@ -44,3 +44,3 @@ {
   },
-  "version": "1.18.0"
+  "version": "1.18.1"
 }

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 1 instance in 1 package

Improved metrics

Number of low supply chain risk alerts

2

decreased by-33.33%

Worsened metrics

Total package byte prevSize

86675

decreased by-0.84%

Lines of code

1108

decreased by-0.89%

No dependency changes