retire 3.0.0 → 3.0.4
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +35 -7
- package/bin/retire +1 -1
- package/lib/reporters/json.js +1 -2
- package/lib/retire.js +1 -1
- package/package.json +1 -1
package/CHANGELOG.md
CHANGED
|
@@ -1,57 +1,85 @@
|
|
|
1
1
|
# Changelog
|
|
2
2
|
|
|
3
|
+
## [3.0.4]
|
|
4
|
+
|
|
5
|
+
### Security
|
|
6
|
+
|
|
7
|
+
- Pin colors dependency to avoid DOS from colors author
|
|
8
|
+
|
|
9
|
+
## [3.0.3]
|
|
10
|
+
|
|
11
|
+
### Bug
|
|
12
|
+
|
|
13
|
+
- Fix version number
|
|
14
|
+
|
|
15
|
+
## [3.0.2]
|
|
16
|
+
|
|
17
|
+
### Dependency update
|
|
18
|
+
|
|
19
|
+
- always output JSON to stdout, to avoid conflict with deprecation warning
|
|
20
|
+
|
|
21
|
+
## [3.0.1]
|
|
22
|
+
|
|
23
|
+
### Dependency update
|
|
24
|
+
|
|
25
|
+
- glob-parent, lodash and hosted-git-info had vulnerabilities and was updated
|
|
26
|
+
|
|
3
27
|
## [3.0.0]
|
|
4
28
|
|
|
5
29
|
### Deprecation notice
|
|
30
|
+
|
|
6
31
|
- The node scanner is deprecated: https://github.com/RetireJS/retire.js/wiki/Deprecating-the-node.js-scanner
|
|
7
32
|
|
|
8
33
|
## [2.2.5]
|
|
9
34
|
|
|
10
35
|
### Dependency update
|
|
36
|
+
|
|
11
37
|
- y18n had a vulnerability and was updated
|
|
12
38
|
|
|
13
39
|
## [2.2.4]
|
|
14
40
|
|
|
15
41
|
### Bugfix
|
|
42
|
+
|
|
16
43
|
- Fixes [#343](https://github.com/RetireJS/retire.js/pull/343) where symlink to nonexistent file causes it to crash with exception. Now it will log it as warn instead.
|
|
17
44
|
|
|
18
45
|
## [2.2.3]
|
|
19
46
|
|
|
20
47
|
### Bugfix
|
|
21
|
-
- Fixes [#337](https://github.com/RetireJS/retire.js/issues/337) where symlinks are not read
|
|
22
48
|
|
|
49
|
+
- Fixes [#337](https://github.com/RetireJS/retire.js/issues/337) where symlinks are not read
|
|
23
50
|
|
|
24
51
|
## [2.2.2]
|
|
25
52
|
|
|
26
53
|
### Bugfix
|
|
27
|
-
- Fixes [#334](https://github.com/RetireJS/retire.js/issues/334) where detected libraries without vulnerabilities show in output even when verbose is not specified
|
|
28
54
|
|
|
55
|
+
- Fixes [#334](https://github.com/RetireJS/retire.js/issues/334) where detected libraries without vulnerabilities show in output even when verbose is not specified
|
|
29
56
|
|
|
30
57
|
## [2.2.1]
|
|
31
58
|
|
|
32
59
|
### Bugfix
|
|
60
|
+
|
|
33
61
|
- Fixes [#321](https://github.com/RetireJS/retire.js/issues/321) where write output to file did not always work as expected
|
|
34
62
|
|
|
35
|
-
## [2.2.0]
|
|
63
|
+
## [2.2.0]
|
|
36
64
|
|
|
37
65
|
### Added
|
|
38
|
-
- Support `--cacert <path>` or `--insecure` when loading the repos (thanks to [adamcohen](https://github.com/adamcohen)) [PR#322](https://github.com/RetireJS/retire.js/pull/322)
|
|
39
66
|
|
|
67
|
+
- Support `--cacert <path>` or `--insecure` when loading the repos (thanks to [adamcohen](https://github.com/adamcohen)) [PR#322](https://github.com/RetireJS/retire.js/pull/322)
|
|
40
68
|
|
|
41
69
|
## [2.1.1] - 2020-03-20
|
|
42
70
|
|
|
43
71
|
### Bugfix
|
|
44
|
-
- Fix compatibility with node 6
|
|
45
72
|
|
|
73
|
+
- Fix compatibility with node 6
|
|
46
74
|
|
|
47
75
|
## [2.1.1] - 2020-03-16
|
|
48
76
|
|
|
49
77
|
### Modified
|
|
50
|
-
- Remove `request` as it is deprecated
|
|
51
78
|
|
|
79
|
+
- Remove `request` as it is deprecated
|
|
52
80
|
|
|
53
81
|
## [2.1.0] - 2020-03-16
|
|
54
82
|
|
|
55
83
|
### Modified
|
|
56
|
-
- Support ** and * in ignore paths (** = any number of folders)
|
|
57
84
|
|
|
85
|
+
- Support ** and \* in ignore paths (** = any number of folders)
|
package/bin/retire
CHANGED
|
@@ -203,7 +203,7 @@ events.on('scan-js', function() {
|
|
|
203
203
|
});
|
|
204
204
|
|
|
205
205
|
events.on('scan-node', function() {
|
|
206
|
-
console.warn('DEPRECATION NOTICE: The node scanning is
|
|
206
|
+
console.warn('DEPRECATION NOTICE: The node scanning is deprecated and will be removed soon. See https://github.com/RetireJS/retire.js/wiki/Deprecating-the-node.js-scanner ')
|
|
207
207
|
resolve.getNodeDependencies(config.nodepath || config.path, config.package).on('done', function(dependencies) {
|
|
208
208
|
scanner.scanDependencies(dependencies, nodeRepo, config);
|
|
209
209
|
events.emit('scan-done');
|
package/lib/reporters/json.js
CHANGED
|
@@ -20,9 +20,8 @@ function configureJsonLogger(logger, writer, config) {
|
|
|
20
20
|
};
|
|
21
21
|
logger.close = function(callback) {
|
|
22
22
|
finalResults.time = (Date.now() - scanStart)/1000;
|
|
23
|
-
var write = vulnsFound ? writer.err : writer.out;
|
|
24
23
|
var res = (config.outputformat === "jsonsimple") ? finalResults.data : finalResults;
|
|
25
|
-
|
|
24
|
+
writer.out(JSON.stringify(res));
|
|
26
25
|
writer.close(callback);
|
|
27
26
|
};
|
|
28
27
|
}
|
package/lib/retire.js
CHANGED
package/package.json
CHANGED