retire 3.2.2 → 3.2.3

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/CHANGELOG.md CHANGED
@@ -1,5 +1,9 @@
1
1
  # Changelog
2
2
 
3
+ ## [3.2.3]
4
+
5
+ - Fix caching bug in CycloneDX JSON output
6
+
3
7
  ## [3.2.2]
4
8
 
5
9
  - Fix bug in CycloneDX JSON output (wrapped components array)
@@ -38,7 +38,7 @@ function configureCycloneDXJSONLogger(logger, writer, config, hash) {
38
38
  ];
39
39
  }
40
40
  var purl = `pkg:npm/${dep.component}@${dep.version}`;
41
- if (seen[purl]) return '';
41
+ if (seen[purl]) return undefined;
42
42
  seen[purl] = true;
43
43
  return {
44
44
  type: "library",
@@ -47,7 +47,7 @@ function configureCycloneDXJSONLogger(logger, writer, config, hash) {
47
47
  purl: purl,
48
48
  hashes: hashes
49
49
  };
50
- })).reduce((a,b) => a.concat(b));
50
+ }).filter(x => x != undefined)).reduce((a,b) => a.concat(b));
51
51
  write(JSON.stringify({
52
52
  bomFormat : "CycloneDX",
53
53
  specVersion : "1.4",
package/lib/retire.js CHANGED
@@ -4,7 +4,7 @@
4
4
  */
5
5
 
6
6
  var exports = exports || {};
7
- exports.version = '3.2.2';
7
+ exports.version = '3.2.3';
8
8
 
9
9
  function isDefined(o) {
10
10
  return typeof o !== 'undefined';
package/package.json CHANGED
@@ -2,7 +2,7 @@
2
2
  "author": "Erlend Oftedal <erlend@oftedal.no>",
3
3
  "name": "retire",
4
4
  "description": "Retire is a tool for detecting use of vulnerable libraries",
5
- "version": "3.2.2",
5
+ "version": "3.2.3",
6
6
  "license": "Apache-2.0",
7
7
  "repository": {
8
8
  "type": "git",