@averjs/builder - npm Package Compare versions

Comparing version 3.0.0-2 to 3.0.0-3

dist/builder.js

 /*!
- * @averjs/builder v3.0.0-2
+ * @averjs/builder v3.0.0-3
  * Copyright 2021 Florian Weber
@@ -4,0 +4,0 @@ * Released under the MIT License.

package.json

 {
   "name": "@averjs/builder",
-  "version": "3.0.0-2",
+  "version": "3.0.0-3",
   "description": "The builder package for averjs.",
@@ -28,3 +28,3 @@ "author": "Florian Weber",
   "dependencies": {
-    "@averjs/config": "3.0.0-2",
+    "@averjs/config": "3.0.0-3",
     "html-minifier": "^4.0.0",
@@ -39,3 +39,3 @@ "lru-cache": "^6.0.0",
   },
-  "gitHead": "1c097c466c50b55cf4dba173b5bf62d7f498ade9"
+  "gitHead": "83dfd68a9b7135fa83a98212e0223b531d764248"
 }

CHANGELOG.md

-# Change Log
-
-All notable changes to this project will be documented in this file.
-See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.
-
-# [2.0.0-4](https://github.com/exreplay/aver.js/compare/v2.0.0-3...v2.0.0-4) (2019-11-23)
-
-
-### Features
-
-* basic support for hook system ([#106](https://github.com/exreplay/aver.js/issues/106)) ([4a048f8](https://github.com/exreplay/aver.js/commit/4a048f8))
-
-
-
-
-
-# [2.0.0-3](https://github.com/exreplay/aver.js/compare/v2.0.0-2...v2.0.0-3) (2019-09-19)
-
-**Note:** Version bump only for package @averjs/builder
-
-
-
-
-
-# [2.0.0-2](https://github.com/exreplay/aver.js/compare/v2.0.0-1...v2.0.0-2) (2019-09-18)
-
-**Note:** Version bump only for package @averjs/builder
-
-
-
-
-
-# [2.0.0-1](https://github.com/exreplay/aver.js/compare/v2.0.0-0...v2.0.0-1) (2019-09-03)
-
-**Note:** Version bump only for package @averjs/builder
-
-
-
-
-
-# [2.0.0-0](https://github.com/exreplay/aver.js/compare/v1.5.3...v2.0.0-0) (2019-09-03)
-
-**Note:** Version bump only for package @averjs/builder

New alerts

Dynamic require

Supply chain risk

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 3 instances in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 2 instances in 1 package

Fixed alerts

Dynamic require

Supply chain risk

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 3 instances in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 2 instances in 1 package

Worsened metrics

Total package byte prevSize

15178

-6.37%

Number of package files

5

-16.67%

Dependency changes

• + Added

  @averjs/config@3.0.0-3
  (transitive)

• - Removed

  @averjs/config@3.0.0-2
  (transitive)

• Updated

  @averjs/config@3.0.0-3