ultra-runner - npm Package Compare versions

Comparing version 2.3.3 to 2.3.4

CHANGELOG.md

@@ -5,2 +5,16 @@ # Changelog
 
+### [2.3.4](https://github.com/folke/ultra-runner/compare/v2.3.3...v2.3.4) (2020-03-24)
+
+
+### Bug Fixes
+
+* 🐛 always extend PATH with local node_modules/.bin directory for commands that execute child processes like nyc [#35](https://github.com/folke/ultra-runner/issues/35) ([b375017](https://github.com/folke/ultra-runner/commit/b375017f61eedcd9ec73ac1f803c5f8b8ba4aa35))
+
+
+### Other
+
+* **deps:** update all non-major dependencies to v2.25.0 ([#42](https://github.com/folke/ultra-runner/issues/42)) ([2d869ae](https://github.com/folke/ultra-runner/commit/2d869aebee30d19478fdeb834a48b8a353f15d9d))
+* **deps:** update dependency @types/prettier to v1.19.1 ([#41](https://github.com/folke/ultra-runner/issues/41)) ([d6266f4](https://github.com/folke/ultra-runner/commit/d6266f43576617d1400e6755e29e7790e24aa3be))
+* **deps:** update dependency prettier to v2.0.2 ([#43](https://github.com/folke/ultra-runner/issues/43)) ([239d833](https://github.com/folke/ultra-runner/commit/239d8337f331ec809677d4bc61576d51b1c4c31b))
+
 ### [2.3.3](https://github.com/folke/ultra-runner/compare/v2.3.2...v2.3.3) (2020-03-22)
@@ -7,0 +21,0 @@

lib/spawn.js

@@ -7,2 +7,3 @@ "use strict";
 const cross_spawn_1 = require("cross-spawn");
+const npmPath = require("npm-run-path");
 class Spawner {
@@ -31,4 +32,6 @@ constructor(cmd, args = [], cwd = process.cwd(), env) {
     spawn(raw = false) {
+        const env = Object.assign(Object.assign(Object.assign({}, process.env), { FORCE_COLOR: `${chalk_1.default.level}` }), this.env);
+        env.PATH = npmPath({ cwd: this.cwd });
         const child = cross_spawn_1.spawn(this.cmd, this.args, {
-            env: Object.assign(Object.assign(Object.assign({}, process.env), { FORCE_COLOR: `${chalk_1.default.level}` }), this.env),
+            env,
             stdio: raw ? "inherit" : "pipe",
@@ -35,0 +38,0 @@ cwd: this.cwd,

package.json

 {
   "name": "ultra-runner",
   "description": "Smart and beautiful script runner that hijacks any `npm run`, `yarn` and `npx` calls for ultra fast execution",
-  "version": "2.3.3",
+  "version": "2.3.4",
   "main": "lib/index.js",
@@ -86,3 +86,3 @@ "repository": "http://github.com/folke/ultra-runner",
     "@types/node": "13.9.3",
-    "@types/prettier": "1.19.0",
+    "@types/prettier": "1.19.1",
     "@types/rimraf": "3.0.0",
@@ -95,4 +95,4 @@ "@types/sinon": "7.5.2",
     "@types/yargs": "15.0.4",
-    "@typescript-eslint/eslint-plugin": "2.24.0",
-    "@typescript-eslint/parser": "2.24.0",
+    "@typescript-eslint/eslint-plugin": "2.25.0",
+    "@typescript-eslint/parser": "2.25.0",
     "builtin-modules": "3.1.0",
@@ -116,3 +116,3 @@ "chai": "4.2.0",
     "markdownlint-cli": "0.22.0",
-    "prettier": "2.0.1",
+    "prettier": "2.0.2",
     "rimraf": "3.0.2",
@@ -134,2 +134,3 @@ "sinon": "9.0.1",
     "json5": "^2.1.1",
+    "npm-run-path": "4.0.1",
     "pid-cwd": "^1.2.0",
@@ -136,0 +137,0 @@ "ps-list": "^7.0.0",

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 2 instances in 1 package

Improved metrics

Total package byte prevSize

199694

increased by0.29%

Number of low supply chain risk alerts

17

decreased by-10.53%

Worsened metrics

Dependency count

16

increased by6.67%

Number of package files

59

decreased by-4.84%

Lines of code

2129

decreased by-0.23%

Dependency changes

• + Addednpm-run-path@4.0.1

• + Addednpm-run-path@4.0.1(transitive)