retire 5.1.3 → 5.1.4

package/CHANGELOG.md

@@ -1,5 +1,11 @@
 # Changelog
 
+## [5.1.4]
+
+### Bugfix
+
+- Fix bug where deepScan would sometimes not report vulnerabilities
+
 ## [5.1.3]
 
 ### Bugfix

package/lib/deepscan.js

@@ -2,6 +2,7 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.deepScan = deepScan;
 const astronomical_1 = require("astronomical");
+const retire_1 = require("./retire");
 function deepScan(content, repo) {
     const astQueries = {};
     const backMap = {};
@@ -30,7 +31,6 @@ function deepScan(content, repo) {
     return detected.reduce((acc, cur) => {
         if (acc.some((c) => c.component === cur.component && c.version === cur.version))
             return acc;
-        acc.push(cur);
-        return acc;
+        return acc.concat((0, retire_1.check)(cur.component, cur.version, repo));
     }, []);
 }

package/lib/retire.js

@@ -4,7 +4,7 @@
  */
 
 var exports = exports || {};
-exports.version = '5.1.3';
+exports.version = '5.1.4';
 
 function isDefined(o) {
   return typeof o !== 'undefined';

package/package.json

@@ -2,7 +2,7 @@
   "author": "Erlend Oftedal <erlend@oftedal.no>",
   "name": "retire",
   "description": "Retire is a tool for detecting use of vulnerable libraries",
-  "version": "5.1.3",
+  "version": "5.1.4",
   "license": "Apache-2.0",
   "repository": {
     "type": "git",