01-custom-library-npm - npm Package Compare versions

Comparing version 1.0.0 to 1.0.1

package.json

 {
   "name": "01-custom-library-npm",
-  "version": "1.0.0",
+  "version": "1.0.1",
   "description": "",
@@ -5,0 +5,0 @@ "main": "dist/webpack-numbers.js",

webpack.config.js

@@ -8,5 +8,21 @@ const path = require('path')
     path: path.resolve(__dirname, 'dist'),
+    clean: true,
     filename: 'webpack-numbers.js',
-    clean: true
+    library: {
+      // library 向外暴露的对象名
+      name: 'webpackNumbers',
+      // 兼容不同的环境 CommonJS、AMD、Node.js 等
+      type: 'umd',
+    },
   },
+
+  // 外部扩展：https://webpack.docschina.org/configuration/externals/#externals
+  externals: {
+    lodash: {
+      commonjs: 'lodash',
+      commonjs2: 'lodash',
+      amd: 'lodash',
+      root: '_',
+    },
+  },
 }

New alerts

Major refactor

Supply chain risk

Package has recently undergone a major refactor. It may be unstable or indicate significant internal changes. Use caution when updating to versions that include significant changes.

Found 1 instance in 1 package

Uses eval

Supply chain risk

Package uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Found 1 instance in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

Fixed alerts

No README

Quality

Package does not have a README. This may indicate a failed publish or a low quality package.

Found 1 instance in 1 package

Improved metrics

Number of package files

6

20%

Number of medium quality alerts

1

-50%

Number of lines in readme file

78

Infinity%

Worsened metrics

Total package byte prevSize

10114

-98.23%

Lines of code

192

-89.5%

Number of low supply chain risk alerts

2

100%

Number of medium supply chain risk alerts

3

Infinity%

No dependency changes