@svayam-opensource/svm-util-log 1.1.0 → 1.1.2
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +7 -0
- package/package.json +6 -4
package/README.md
CHANGED
|
@@ -378,6 +378,13 @@ too, so a single transaction can be traced without switching on a whole module.
|
|
|
378
378
|
Console output uses [winston](https://github.com/winstonjs/winston); file rotation uses
|
|
379
379
|
[winston-daily-rotate-file](https://github.com/winstonjs/winston-daily-rotate-file).
|
|
380
380
|
|
|
381
|
+
**Why `moment` is a dependency.** The logger never calls `moment`; the file rotator does
|
|
382
|
+
(winston-daily-rotate-file → file-stream-rotator → `moment ^2.29.1`). Versions 2.29.2–2.30.1
|
|
383
|
+
carry advisory [GHSA-4p3w-j4w9-5jqw](https://github.com/advisories/GHSA-4p3w-j4w9-5jqw), fixed
|
|
384
|
+
in 2.31.0. From 1.1.1 this package depends on `moment ^2.31.0` directly, so installing it
|
|
385
|
+
lifts the rotator's copy to a fixed version — also in projects whose lockfile still holds
|
|
386
|
+
2.30.1. `npm ls moment` in your project should show 2.31.x, deduped.
|
|
387
|
+
|
|
381
388
|
### Design rationale
|
|
382
389
|
|
|
383
390
|
Why this package is separate from `@svayam/svm-util`, why configuration is injected rather
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@svayam-opensource/svm-util-log",
|
|
3
|
-
"version": "1.1.
|
|
3
|
+
"version": "1.1.2",
|
|
4
4
|
"description": "Svayam's shared logging framework — the logger from svm-util, with only the dependencies a logger needs.",
|
|
5
5
|
"type": "module",
|
|
6
6
|
"exports": {
|
|
@@ -33,9 +33,11 @@
|
|
|
33
33
|
"clean": "rm -rf lib",
|
|
34
34
|
"build": "npm run clean && tsc -p tsconfig.json && tsc -p tsconfig-cjs.json && node scripts/cjs-package-json.mjs",
|
|
35
35
|
"test": "NODE_OPTIONS='--import tsx' mocha --extensions ts 'test/**/*.test.ts'",
|
|
36
|
-
"prepublishOnly": "npm run build && npm run test"
|
|
36
|
+
"prepublishOnly": "npm run build && npm run test",
|
|
37
|
+
"audit:prod": "node scripts/audit-prod.mjs"
|
|
37
38
|
},
|
|
38
39
|
"dependencies": {
|
|
40
|
+
"moment": "^2.31.0",
|
|
39
41
|
"winston": "^3.19.0",
|
|
40
42
|
"winston-daily-rotate-file": "^5.0.0",
|
|
41
43
|
"winston-transport": "^4.9.0"
|
|
@@ -50,8 +52,8 @@
|
|
|
50
52
|
"typescript": "^5.7.2"
|
|
51
53
|
},
|
|
52
54
|
"gov": {
|
|
53
|
-
"contentSha": "
|
|
55
|
+
"contentSha": "e5f8d69852f88c1b8a65821c24df37bb00ccf822374a6b78e6ee6ce5a26d2b9f",
|
|
54
56
|
"shaFrom": "built-ref",
|
|
55
|
-
"commit": "
|
|
57
|
+
"commit": "ae689d02ee204adc65fb2951b3a82e35379ec9a1"
|
|
56
58
|
}
|
|
57
59
|
}
|