snyk-gradle-plugin - npm Package Compare versions

Comparing version 2.11.0 to 2.11.1

dist/index.js

@@ -13,3 +13,15 @@ "use strict";
 // To enable debugging output, run the CLI as `DEBUG=snyk-gradle-plugin snyk ...`
-const debugLogging = debugModule('snyk-gradle-plugin');
+let logger = null;
+function debugLog(s) {
+    if (logger === null) {
+        // Lazy init: Snyk CLI needs to process the CLI argument "-d" first.
+        // TODO(BST-648): more robust handling of the debug settings
+        if (process.env.DEBUG) {
+            debugModule.enable(process.env.DEBUG);
+        }
+        logger = debugModule('snyk-gradle-plugin');
+        console.log('debugger initialized ' + process.env.DEBUG);
+    }
+    logger(s);
+}
 const packageFormatVersion = 'mvn:0.0.1';
@@ -144,3 +156,3 @@ function isMultiSubProject(options) {
         if (maybeMatch) {
-            debugLogging(maybeMatch[1]);
+            debugLog(maybeMatch[1]);
         }
@@ -147,0 +159,0 @@ });

package.json

@@ -45,3 +45,3 @@ {
   },
-  "version": "2.11.0"
+  "version": "2.11.1"
 }

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

37851

increased by1.95%

Lines of code

440

increased by2.8%

Worsened metrics

Number of low supply chain risk alerts

4

increased by300%

No dependency changes