@nodesecure/scanner 3.2.0 → 3.2.1

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@nodesecure/scanner",
-  "version": "3.2.0",
+  "version": "3.2.1",
   "description": "A package API to run a static analysis of your module's dependencies.",
   "exports": "./index.js",
   "engines": {

package/src/utils/warnings.js

@@ -8,7 +8,7 @@ const kWarningsMessages = Object.freeze({
   iohook: getToken("warnings.keylogging")
 });
 const kPackages = new Set(Object.keys(kWarningsMessages));
-const kAuthors = new Set(["Marak Squires"]);
+const kAuthors = new Set(["marak", "marak.squires@gmail.com"]);
 
 function getWarning(depName) {
   return `${kDetectedDep(depName)} ${kWarningsMessages[depName]}`;
@@ -24,9 +24,10 @@ export function getDependenciesWarnings(dependencies) {
 
   // TODO: optimize with @nodesecure/author later
   for (const [packageName, dependency] of dependencies) {
-    const author = dependency.metadata.author?.name ?? null;
-    if (kAuthors.has(author)) {
-      warnings.push(`'${author}' package '${packageName}' has been detected in the dependency tree`);
+    for (const { name, email } of dependency.metadata.maintainers) {
+      if (kAuthors.has(name) || kAuthors.has(email)) {
+        warnings.push(`'Marak Squires' package '${packageName}' has been detected in the dependency tree`);
+      }
     }
   }