@apollo/protobufjs - npm Package Compare versions

Comparing version 1.2.2 to 2.0.0

cli/package.json

@@ -5,4 +5,12 @@ {
     "jsdoc": "^3.6.3",
-    "minimist": "^1.2.0"
+    "minimist": "^1.2.0",
+    "chalk": "^1.1.3",
+    "escodegen": "^1.8.1",
+    "espree": "^3.1.3",
+    "estraverse": "^4.2.0",
+    "glob": "^7.1.1",
+    "semver": "^5.3.0",
+    "tmp": "0.0.31",
+    "uglify-js": "^2.8.15"
   }
 }

cli/util.js

@@ -6,3 +6,3 @@ "use strict";
 
-var semver;
+var semver = require("semver");
 
@@ -137,23 +137,29 @@ try {
 exports.setup = function() {
-    var pkg = require(path.join(__dirname, "..", "package.json"));
-    var version = pkg.dependencies["semver"] || pkg.devDependencies["semver"];
-    if (!modExists("semver", version)) {
-        process.stderr.write("installing semver@" + version + "\n");
-        modInstall("semver@" + version);
-    }
-    semver = require("semver"); // used from now on for version comparison
-    var install = [];
-    pkg.cliDependencies.forEach(function(name) {
-        if (name === "semver")
-            return;
-        version = pkg.dependencies[name] || pkg.devDependencies[name];
-        if (!modExists(name, version)) {
-            process.stderr.write("installing " + name + "@" + version + "\n");
-            install.push(name + "@" + version);
-        }
-    });
-    require("../scripts/postinstall"); // emit postinstall warning, if any
-    if (!install.length)
-        return;
-    modInstall(install);
+    // This thing where the CLI installs dependencies at runtime without any
+    // pinning is very strange. Since we only really care about using this
+    // CLI from apollo-reporting-protobuf we can just make sure that there
+    // are appropriate devDependencies set up in that package and not do this
+    // strange thing.
+
+    // var pkg = require(path.join(__dirname, "..", "package.json"));
+    // var version = pkg.dependencies["semver"] || pkg.devDependencies["semver"];
+    // if (!modExists("semver", version)) {
+    //     process.stderr.write("installing semver@" + version + "\n");
+    //     modInstall("semver@" + version);
+    // }
+    // semver = require("semver"); // used from now on for version comparison
+    // var install = [];
+    // pkg.cliDependencies.forEach(function(name) {
+    //     if (name === "semver")
+    //         return;
+    //     version = pkg.dependencies[name] || pkg.devDependencies[name];
+    //     if (!modExists(name, version)) {
+    //         process.stderr.write("installing " + name + "@" + version + "\n");
+    //         install.push(name + "@" + version);
+    //     }
+    // });
+    // require("../scripts/postinstall"); // emit postinstall warning, if any
+    // if (!install.length)
+    //     return;
+    // modInstall(install);
 };
@@ -160,0 +166,0 @@

dist/light/protobuf.min.js

 /*!
- * protobuf.js v1.2.1 (c) 2016, daniel wirtz
- * compiled thu, 29 apr 2021 21:46:32 utc
+ * protobuf.js (c) 2016, daniel wirtz
  * licensed under the bsd-3-clause license
@@ -5,0 +4,0 @@ * see: https://github.com/apollographql/protobuf.js for details

dist/minimal/protobuf.min.js

 /*!
- * protobuf.js v1.2.1 (c) 2016, daniel wirtz
- * compiled thu, 29 apr 2021 21:46:32 utc
+ * protobuf.js (c) 2016, daniel wirtz
  * licensed under the bsd-3-clause license
@@ -5,0 +4,0 @@ * see: https://github.com/apollographql/protobuf.js for details

package.json

 {
   "name": "@apollo/protobufjs",
-  "version": "1.2.2",
+  "version": "2.0.0",
   "versionScheme": "~",
@@ -5,0 +5,0 @@ "description": "Protocol Buffers for JavaScript (& TypeScript).",

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Deprecated

Maintenance

The maintainer of the package marked it as deprecated. This could indicate that a single version should not be used, or that the package is no longer maintained and any new vulnerabilities will not be fixed.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

3159883

increased by0.02%

Number of low supply chain risk alerts

14

decreased by-6.67%

Worsened metrics

Lines of code

38598

Number of medium maintenance alerts

1

increased byInfinity%

No dependency changes