workspace-tools - npm Package Compare versions

Comparing version 0.9.5 to 0.9.6

CHANGELOG.json

@@ -5,3 +5,18 @@ {
     {
-      "date": "Thu, 10 Sep 2020 23:36:17 GMT",
+      "date": "Thu, 10 Sep 2020 23:43:48 GMT",
+      "tag": "workspace-tools_v0.9.6",
+      "version": "0.9.6",
+      "comments": {
+        "patch": [
+          {
+            "comment": "no more requires",
+            "author": "[e-mail]",
+            "commit": "b44eadeecc056d2130c329334166346fbb4d65b7",
+            "package": "workspace-tools"
+          }
+        ]
+      }
+    },
+    {
+      "date": "Thu, 10 Sep 2020 23:36:23 GMT",
       "tag": "workspace-tools_v0.9.5",
@@ -8,0 +23,0 @@ "version": "0.9.5",

CHANGELOG.md

 # Change Log - workspace-tools
 
-This log was last generated on Thu, 10 Sep 2020 23:36:17 GMT and should not be manually modified.
+This log was last generated on Thu, 10 Sep 2020 23:43:48 GMT and should not be manually modified.
 
 <!-- Start content -->
 
+## 0.9.6
+
+Thu, 10 Sep 2020 23:43:48 GMT
+
+### Patches
+
+- no more requires ([e-mail])
+
 ## 0.9.5
 
-Thu, 10 Sep 2020 23:36:17 GMT
+Thu, 10 Sep 2020 23:36:23 GMT
 
@@ -11,0 +19,0 @@ ### Patches

lib/workspaces/getWorkspacePackageInfo.js

@@ -7,2 +7,3 @@ "use strict";
 const path_1 = __importDefault(require("path"));
+const fs_1 = __importDefault(require("fs"));
 function getWorkspacePackageInfo(workspacePaths) {
@@ -16,3 +17,3 @@ if (!workspacePaths) {
         try {
-            packageJson = require(packageJsonPath);
+            packageJson = JSON.parse(fs_1.default.readFileSync(packageJsonPath, "utf-8"));
         }
@@ -19,0 +20,0 @@ catch (_a) {

package.json

 {
   "name": "workspace-tools",
-  "version": "0.9.5",
+  "version": "0.9.6",
   "license": "MIT",
@@ -5,0 +5,0 @@ "main": "lib/index.js",

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Dynamic require

Supply chain risk

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

78837

increased by0.74%

Lines of code

1865

increased by0.87%

No dependency changes