v4.0.0

News

• Moved repository to a GitHub organization: dependency-check-team

Breaking

• BREAKING: Remove --entry, instead add entries directly 8657129

• BREAKING: Drop callback parameter from main export (doesn't affect the CLI interface) 80866f8

• BREAKING: Remove --extra alias, use --unused instead 53d2c3d

• BREAKING: By default, run all checks, both missing and unused 5e4f11b

• BREAKING: Require Node >=10 fb09c07

• SEMIBREAKING: Make --quiet the standard, add --verbose for previous verbose logging behavior d886e2b

• SEMIBREAKING: Update to latest globby release 2c91ae0

Improvements

• Move to require('module').builtinModules 55d282e
• Add resolving of package.json directly from files da6c139

Fixes

• Internal: Make parse() + path resolving async 8eaba08

Dependency updates

• Update to latest micromatch release 011184c

Full list of changes

v3.4.1...v4.0.0

Entry Path Globs

Added

• Resolve entry paths with glob support

Fallback `.js` Detective

Fixed

• Fallback on .js when no detective is found for extension

Changed

• Use async resolve() function

Detection Extension Map

Added

• Enable the ability to support multiple detectives via different extensions