snyk-resolve-deps - npm Package Compare versions

Comparing version 4.0.0 to 4.0.1

lib/deps.js

@@ -24,7 +24,17 @@ module.exports = loadModules;
   tryRequire.cache.reset(); // reset the package cache on re-run
+
+  var opt = _.clone(options || {});
+  var pkgRoot = root;
+
+  if (opt.file) {
+    var pathInfo = path.parse(opt.file);
+    pkgRoot = path.resolve(pkgRoot, pathInfo.dir);
+    opt.file = pathInfo.base;
+  }
+
   return loadModulesInternal(
-    root,
+    pkgRoot,
     depType || null,
     null,
-    options
+    opt
   ).then(function (tree) {
@@ -36,3 +46,3 @@ // ensure there's no missing packages our known root deps
         if (!tree.dependencies[name]) {
-          missing.push(resolve(name, root).then(function (dir) {
+          missing.push(resolve(name, pkgRoot).then(function (dir) {
             return loadModulesInternal(dir, depTypes.PROD, {
@@ -76,3 +86,3 @@ __from: [tree.name + '@' + tree.version, name],
   var modules = {};
-  var dir = path.resolve(root, 'package.json');
+  var dir = path.resolve(root, options.file || 'package.json');
   // 1. read package.json for written deps
@@ -79,0 +89,0 @@ var promise = tryRequire(dir).then(function (pkg) {

lib/lodash.js

 module.exports = {
+  clone: require('lodash.clone'),
   set: require('lodash.set'),
@@ -3,0 +4,0 @@ get: require('lodash.get'),

package.json

@@ -32,2 +32,3 @@ {
     "debug": "^3.2.5",
+    "lodash.clone": "^4.5.0",
     "lodash.get": "^4.4.2",
@@ -50,3 +51,3 @@ "lodash.set": "^4.3.2",
   },
-  "version": "4.0.0"
+  "version": "4.0.1"
 }

README.md

@@ -32,2 +32,3 @@ # snyk-resolve-deps
   - noFromArrays: [default, `false`] don't include `from` arrays with list of deps from `root` on every node
+  - file: [default, `'package.json'`] location of the package file
 
@@ -34,0 +35,0 @@ ## How it works

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

23891

increased by1.5%

Lines of code

547

increased by1.48%

Number of lines in readme file

60

increased by1.69%

Worsened metrics

Dependency count

15

increased by7.14%

Dependency changes

• + Addedlodash.clone@^4.5.0

• + Addedlodash.clone@4.5.0(transitive)