• Home
  • Features
  • Pricing
  • Docs
  • Announcements
  • Sign In

npm / arborist / #110

Build:
Build:
LAST BUILD BRANCH:
DEFAULT BRANCH: master
Ran 28 May 2020 01:24AM UTC
Jobs 1
Files 30
Run time 4s
Badge
Embed ▾
README BADGES
x

If you need to use a raster PNG badge, change the '.svg' to '.png' in the link

Markdown

Textile

RDoc

HTML

Rst

pending completion
#110

push

isaacs
Only use hidden lockfile if up to date

Compare the mtime of the hidden lockfile at
node_modules/.package-lock.json against all package folders in
node_modules, and ensure that all packages in node_modules exist in the
lockfile data.

This of course still can be thwarted by editing a single file within a
package folder, but not adding or deleting any files or folders, or
modifying files in nested subfolders in a package in any way whatsoever.

However, it prevents the overwhelming majority case where this would
bite us, which is someone installing something with yarn or previous
versions of npm.

In those cases, we ignore the hidden lockfile, meaning that any
loadActual call will read the files on disk as normal.

Fix #91

1905 of 1905 branches covered (100.0%)

Branch coverage included in aggregate %.

2840 of 2840 relevant lines covered (100.0%)

311.2 hits per line

Jobs
ID Job ID Ran Files Coverage
1 #110.1 28 May 2020 01:24AM UTC 0
100.0
Source Files on build #110
Detailed source file information is not available for this build.
  • Back to Repo
  • 92a6d4bd on github
  • Prev Build on
  • Next Build on
STATUS · Troubleshooting · Open an Issue · Sales · Support · CAREERS · ENTERPRISE · START FREE · SCHEDULE DEMO
ANNOUNCEMENTS · TWITTER · TOS & SLA · Supported CI Services · What's a CI service? · Automated Testing

© 2026 Coveralls, Inc