snyk-go-plugin - npm Package Compare versions

Comparing version 1.6.1 to 1.6.2

package.json

@@ -9,12 +9,13 @@ {
   },
-  "main": "lib/index.js",
+  "main": "dist/lib/index.js",
   "scripts": {
-    "lint": "eslint -c .eslintrc lib test/*.js test/system/*.js",
-    "test-functional": "tap ./test/*.test.js -R spec",
-    "test-system": "tap -R spec --timeout=300 ./test/system/*.test.js",
+    "build": "tsc",
+    "lint": "tslint --project tsconfig.json --format stylish",
+    "prepare": "npm run build",
+    "test-functional": "tap ./test/*.test.ts -R spec",
+    "test-system": "tap -R spec --timeout=300 ./test/system/*.test.ts",
     "test": "npm run test-functional && npm run test-system",
-    "test-functional-windows": "tap -R spec --timeout=300 ./test/*.test.js -g \"^(?!.*symlink)\"",
-    "test-system-windows": "tap -R spec --timeout=300 ./test/system/*.test.js -g \"^(?!.*prometheus)\"",
+    "test-functional-windows": "tap -R spec --timeout=300 ./test/*.test.ts -g \"^(?!.*symlink)\"",
+    "test-system-windows": "tap -R spec --timeout=300 ./test/system/*.test.ts -g \"^(?!.*prometheus)\"",
     "test-windows": "npm run test-functional-windows && npm run test-system-windows",
-    "semantic-release": "semantic-release",
     "watch": "nodemon -e 'js go'  -x 'npm run test-functional'"
@@ -26,12 +27,17 @@ },
     "graphlib": "^2.1.1",
-    "toml": "^2.3.2",
-    "tmp": "0.0.33"
+    "snyk-go-parser": "1.0.0",
+    "tmp": "0.0.33",
+    "toml": "^2.3.2"
   },
   "devDependencies": {
-    "eslint": "^4.11.0",
-    "semantic-release": "^15",
-    "tap": "^12.0.1",
-    "tap-only": "0.0.5"
+    "@types/graphlib": "^2.1.4",
+    "@types/node": "^6.14.4",
+    "@types/tmp": "^0.1.0",
+    "tap": "^12.6.1",
+    "tap-only": "0.0.5",
+    "ts-node": "^8.0.3",
+    "tslint": "^5.15.0",
+    "typescript": "^3.4.2"
   },
-  "version": "1.6.1"
+  "version": "1.6.2"
 }

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Major refactor

Supply chain risk

Package has recently undergone a major refactor. It may be unstable or indicate significant internal changes. Use caution when updating to versions that include significant changes.

Found 1 instance in 1 package

Shell access

Supply chain risk

This module accesses the system shell. Accessing the system shell increases the risk of executing arbitrary code.

Found 1 instance in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Shell access

Supply chain risk

This module accesses the system shell. Accessing the system shell increases the risk of executing arbitrary code.

Found 1 instance in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

57957

increased by59.46%

Number of package files

23

increased by53.33%

Lines of code

692

increased by77.89%

Worsened metrics

Dependency count

4

increased by33.33%

Dev dependency count

8

increased by100%

Number of medium supply chain risk alerts

2

increased by100%

Dependency changes

• + Addedsnyk-go-parser@1.0.0

• + Addedsnyk-go-parser@1.0.0(transitive)

• + Addedtoml@3.0.0(transitive)

• + Addedtslib@1.14.1(transitive)