Skip to content

v0.7.0

Choose a tag to compare

View all tags
@Booyaka101 Booyaka101 released this 24 Jul 13:18
v0.7.0
589d1c5

Everything since v0.5.0 — now on npm as npm-script-lens@0.7.0.

v0.7.0

  • review subcommand: lists packages with pending npm v12 approve-scripts approvals alongside the actual install-script content, so you can see exactly what each lifecycle script would run before allowing it.

v0.6.0 — npm v12 approve-scripts gap check

  • v12-optional-gap (npm/cli#9562): optional deps with install scripts that approve-scripts --allow-scripts-pending never surfaces but npm ci --strict-allow-scripts rejects (the fsevents-on-Linux trap).
  • v12-eglobal-risk (npm/cli#9463): npm install -g <pkg> in workflows where the package has install scripts and no --allow-scripts (no post-install approval path exists globally).
  • Both integrate with the Markdown report, --json, and --sarif surfaces; the Action gates the check on the runner's npm major version.
Assets 2
Loading