fix(plugin-js-packages): pnpm outdated fallback

[hanna-skryl]

This bug surfaced in CI when a pull request removed a dependency.

The Code PushUp GitHub Action installs dependencies for the PR branch, which no longer includes the removed package in node_modules. When the action switches to the base branch for comparison, it does not reinstall dependencies. The base branch's package.json still references the removed dependency, so pnpm outdated --json reports it but without a current field since the package is not in node_modules.

Example

The plugin then crashes when calling semver.clean(undefined) on the missing current value.

[nx-cloud]

View your CI Pipeline Execution ↗ for commit 12174df

Command	Status	Duration	Result
nx code-pushup --nx-bail -- compare	✅ Succeeded	58s	View ↗
nx code-pushup --nx-bail --	✅ Succeeded	1m 4s	View ↗
nx code-pushup --nx-bail -- print-config --outp...	✅ Succeeded	5m 8s	View ↗

---

☁️ Nx Cloud last updated this comment at 2025-11-26 23:46:04 UTC

[pkg-pr-new]

Open in StackBlitz

@code-pushup/ci

npm i https://pkg.pr.new/code-pushup/cli/@code-pushup/ci@1155

@code-pushup/cli

npm i https://pkg.pr.new/code-pushup/cli/@code-pushup/cli@1155

@code-pushup/core

npm i https://pkg.pr.new/code-pushup/cli/@code-pushup/core@1155

@code-pushup/create-cli

npm i https://pkg.pr.new/code-pushup/cli/@code-pushup/create-cli@1155

@code-pushup/models

npm i https://pkg.pr.new/code-pushup/cli/@code-pushup/models@1155

@code-pushup/nx-plugin

npm i https://pkg.pr.new/code-pushup/cli/@code-pushup/nx-plugin@1155

@code-pushup/axe-plugin

npm i https://pkg.pr.new/code-pushup/cli/@code-pushup/axe-plugin@1155

@code-pushup/coverage-plugin

npm i https://pkg.pr.new/code-pushup/cli/@code-pushup/coverage-plugin@1155

@code-pushup/eslint-plugin

npm i https://pkg.pr.new/code-pushup/cli/@code-pushup/eslint-plugin@1155

@code-pushup/js-packages-plugin

npm i https://pkg.pr.new/code-pushup/cli/@code-pushup/js-packages-plugin@1155

@code-pushup/jsdocs-plugin

npm i https://pkg.pr.new/code-pushup/cli/@code-pushup/jsdocs-plugin@1155

@code-pushup/lighthouse-plugin

npm i https://pkg.pr.new/code-pushup/cli/@code-pushup/lighthouse-plugin@1155

@code-pushup/typescript-plugin

npm i https://pkg.pr.new/code-pushup/cli/@code-pushup/typescript-plugin@1155

@code-pushup/utils

npm i https://pkg.pr.new/code-pushup/cli/@code-pushup/utils@1155

@code-pushup/models-transformers

npm i https://pkg.pr.new/code-pushup/cli/@code-pushup/models-transformers@1155

commit: 12174df

[github-actions]

Code PushUp

🤨 Code PushUp report has both improvements and regressions – compared current commit d9afe13 with previous commit e1152f2.

🕵️ See full comparison in Code PushUp portal 🔍

🏷️ Categories

🏷️ Category	⭐ Previous score	⭐ Current score	🔄 Score change
Performance	🔴 36	🔴 34
Code coverage	🟡 89	🟡 89	–
Security	🔴 43	🔴 43	–
Updates	🟡 71	🟡 71	–
Accessibility	🟢 92	🟢 92	–
Best Practices	🟢 100	🟢 100	–
SEO	🟢 92	🟢 92	–
Type Safety	🟢 100	🟢 100	–
Bug prevention	🟢 100	🟢 100	–
Miscellaneous	🟢 100	🟢 100	–
Code style	🟢 100	🟢 100	–
Documentation	🔴 35	🔴 35	–

👎 1 group regressed, 👍 1 audit improved, 👎 3 audits regressed, 15 audits changed without impacting score

🗃️ Groups

🔌 Plugin	🗃️ Group	⭐ Previous score	⭐ Current score	🔄 Score change
Lighthouse	Performance	🔴 36	🔴 34

22 other groups are unchanged.

🛡️ Audits

🔌 Plugin	🛡️ Audit	📏 Previous value	📏 Current value	🔄 Value change
Lighthouse	Total Blocking Time	🟥 1,750 ms	🟥 2,290 ms
Lighthouse	Speed Index	🟥 6.8 s	🟥 7.1 s
Lighthouse	First Contentful Paint	🟥 3.3 s	🟥 3.2 s
Lighthouse	Time to Interactive	🟥 13.2 s	🟥 13.6 s
Lighthouse	Avoids enormous network payloads	🟩 Total size was 2,020 KiB	🟩 Total size was 2,024 KiB
Lighthouse	Minimizes main-thread work	🟥 12.1 s	🟥 13.7 s
Lighthouse	Largest Contentful Paint	🟥 11.3 s	🟥 11.8 s
Lighthouse	Max Potential First Input Delay	🟥 1,260 ms	🟥 1,720 ms
Lighthouse	JavaScript execution time	🟥 5.0 s	🟥 5.4 s
Lighthouse	Uses efficient cache policy on static assets	🟨 30 resources found	🟨 30 resources found
Lighthouse	Server Backend Latencies	🟩 1,230 ms	🟩 830 ms
Lighthouse	Remove duplicate modules in JavaScript bundles	🟥 Potential savings of 104 KiB	🟥 Potential savings of 104 KiB
Lighthouse	Metrics	🟩 100%	🟩 100%
Lighthouse	Initial server response time was short	🟩 Root document took 430 ms	🟩 Root document took 520 ms
Lighthouse	Reduce unused JavaScript	🟥 Potential savings of 184 KiB	🟥 Potential savings of 184 KiB
Lighthouse	Reduce unused CSS	🟥 Potential savings of 105 KiB	🟥 Potential savings of 105 KiB
Lighthouse	Network Round Trip Times	🟩 60 ms	🟩 50 ms
Code coverage	Branch coverage	🟨 87.3 %	🟨 87.3 %
Code coverage	Line coverage	🟨 85.3 %	🟨 85.3 %

659 other audits are unchanged.

[matejchalk]

Makes sense, thanks for the fix 👍