snyk-policy - npm Package Compare versions

Comparing version 1.22.0 to 1.22.1

lib/index.js

@@ -231,12 +231,1 @@ const fs = require('promise-fs');
 }
-
-/* istanbul ignore if */
-if (!module.parent) {
-  load(process.argv[2])
-    .then(function (res) {
-      console.log(JSON.stringify(res, '', 2));
-    })
-    .catch(function (e) {
-      console.log(e.stack);
-    });
-}

lib/parser/index.js

@@ -1,2 +0,1 @@
-const path = require('path');
 const cloneDeep = require('lodash.clonedeep');
@@ -6,2 +5,3 @@ const semver = require('semver');
 const addComments = require('./add-comments');
+const { version: versionFromPackageJson } = require('../../package.json');
 
@@ -70,7 +70,4 @@ module.exports = {
 function version() {
-  const filename = path.resolve(__dirname, '..', '..', 'package.json');
-  const version = require(filename).version;
-
-  if (version && version !== '0.0.0') {
-    return 'v' + version;
+  if (versionFromPackageJson && versionFromPackageJson !== '0.0.0') {
+    return 'v' + versionFromPackageJson;
   }
@@ -77,0 +74,0 @@

package.json

@@ -46,3 +46,3 @@ {
   },
-  "version": "1.22.0"
+  "version": "1.22.1"
 }

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Dynamic require

Supply chain risk

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

Found 1 instance in 1 package

Improved metrics

Number of low supply chain risk alerts

2

decreased by-33.33%

Worsened metrics

Total package byte prevSize

42969

decreased by-0.57%

Lines of code

972

decreased by-1.22%

No dependency changes