yaml-or-json - npm Package Compare versions

Comparing version 0.1.0 to 0.2.0

index.js

@@ -5,2 +5,3 @@ 'use strict';
 var yaml = require('js-yaml');
+var json5 = require('json5');
 
@@ -14,3 +15,3 @@ var opts = {
     return fs.readFileSync(filePath, opts);
-  } catch(e) {
+  } catch (e) {
     return undefined;
@@ -33,5 +34,11 @@ }
 
-  return require(path + '.json');
+  content = readFile(path + '.json');
+
+  if (typeof content !== 'undefined') {
+    return json5.parse(content);
+  }
+
+  throw new Error('no config file found');
 }
 
 module.exports = yamlOrJSON;

package.json

 {
   "name": "yaml-or-json",
-  "version": "0.1.0",
+  "version": "0.2.0",
   "description": "Requires a yaml or json config file depending on what it finds.",
@@ -9,2 +9,5 @@ "main": "index.js",
   },
+  "files": [
+    "index.js"
+  ],
   "repository": {
@@ -33,3 +36,4 @@ "type": "git",
   "dependencies": {
-    "js-yaml": "^3.4.0"
+    "js-yaml": "^3.4.0",
+    "json5": "^0.4.0"
   },
@@ -36,0 +40,0 @@ "devDependencies": {

README.md

@@ -30,4 +30,9 @@ # yaml-or-json
 
+## JSON5 is supported!
+
+JSON files are parsed by [JSON5 parser](https://www.npmjs.com/package/json5).
+
+
 ## License
 
 The MIT License (MIT)

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Native code

Supply chain risk

Contains native code (e.g., compiled binaries or shared libraries). Including native code can obscure malicious behavior.

Found 1 instance in 1 package

Dynamic require

Supply chain risk

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

Found 1 instance in 1 package

Improved metrics

Number of lines in readme file

38

increased by15.15%

Number of low supply chain risk alerts

1

decreased by-50%

Number of medium supply chain risk alerts

0

decreased by-100%

Worsened metrics

Total package byte prevSize

3642

decreased by-64.19%

Dependency count

2

increased by100%

Number of package files

4

decreased by-69.23%

Lines of code

30

decreased by-40%

Dependency changes

• + Addedjson5@^0.4.0

• + Addedjson5@0.4.0(transitive)