which - npm Package Compare versions

Comparing version 1.2.9 to 1.2.10

CHANGELOG.md

 # Changes
 
 
+## v1.2.10
+
+* Use env.PATH only, not env.Path
+
 ## v1.2.9
@@ -5,0 +9,0 @@

package.json

@@ -5,3 +5,3 @@ {
   "description": "Like which(1) unix command. Find the first instance of an executable in the PATH.",
-  "version": "1.2.9",
+  "version": "1.2.10",
   "repository": {
@@ -8,0 +8,0 @@ "type": "git",

which.js

@@ -22,3 +22,3 @@ module.exports = which
   var colon = opt.colon || COLON
-  var pathEnv = opt.path || process.env.Path || process.env.PATH || ''
+  var pathEnv = opt.path || process.env.PATH || ''
   var pathExt = ['']
@@ -25,0 +25,0 @@

New alerts

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 1 instance in 1 package

Fixed alerts

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 4 instances in 1 package

Improved metrics

Total package byte prevSize

9117

increased by0.31%

Worsened metrics

Number of low supply chain risk alerts

9

increased by50%

No dependency changes