which - npm Package Compare versions

Comparing version 1.2.10 to 1.2.11

CHANGELOG.md

 # Changes
 
 
+## v1.2.11
+
+* Prevent changelog script from being included in package
+
 ## v1.2.10
@@ -5,0 +9,0 @@

package.json

@@ -5,3 +5,3 @@ {
   "description": "Like which(1) unix command. Find the first instance of an executable in the PATH.",
-  "version": "1.2.10",
+  "version": "1.2.11",
   "repository": {
@@ -24,3 +24,3 @@ "type": "git",
     "test": "tap test/*.js --cov",
-    "changelog": "bash changelog.sh",
+    "changelog": "bash gen-changelog.sh",
     "postversion": "npm run changelog && git add CHANGELOG.md && git commit -m 'update changelog - '${npm_package_version}"
@@ -27,0 +27,0 @@ },

New alerts

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 3 instances in 1 package

Fixed alerts

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 1 instance in 1 package

Improved metrics

Number of low supply chain risk alerts

5

decreased by-44.44%

Worsened metrics

Total package byte prevSize

8954

decreased by-1.79%

Number of package files

6

decreased by-14.29%

No dependency changes