fix: ensure dedupe orders by most recent pub date

Fixes SC-1076
snyk · Apr 20, 2016 · f5856bf · f5856bf
1 parent c04c9e5
commit f5856bf
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/lib/protect/dedupe-patches.js b/lib/protect/dedupe-patches.js
@@ -16,8 +16,8 @@ function dedupe(source) {
 
     var other = acc[key];
     if (other) {
-      debug('dupe found on %s & %s', vuln.id, other.id, key);
-      if (vuln.patches.modificationTime > other.patches.modificationTime) {
+      debug('dupe found on %s & %s', vuln.id, other.id);
+      if (vuln.publicationTime > other.publicationTime) {
         debug('stripping %s', other.id);
         removed.push(other);
         acc[key] = vuln;