@carbon/cli - npm Package Compare versions

Comparing version 11.15.1 to 11.16.0-rc.0

package.json

 {
   "name": "@carbon/cli",
   "description": "Task automation for working with the Carbon Design System",
-  "version": "11.15.1",
+  "version": "11.16.0-rc.0",
   "license": "Apache-2.0",
@@ -26,5 +26,9 @@ "bin": {
   },
+  "scripts": {
+    "postinstall": "ibmtelemetry --config=telemetry.yml"
+  },
   "dependencies": {
     "@babel/core": "^7.18.2",
     "@carbon/cli-reporter": "^10.7.0",
+    "@ibm/telemetry-js": "^1.2.1",
     "@octokit/plugin-retry": "^3.0.7",
@@ -55,6 +59,6 @@ "@octokit/plugin-throttling": "^4.0.0",
     "sassdoc": "^2.7.3",
-    "typescript-config-carbon": "^0.2.1",
+    "typescript-config-carbon": "^0.2.0",
     "yargs": "^17.0.1"
   },
-  "gitHead": "d6904c019acc9b8cb8f5a01732bc963a71fa93bf"
+  "gitHead": "fd9030978919c8d2ce0c102db94aeabf88563c34"
 }

README.md

@@ -58,1 +58,10 @@ # @carbon/cli
 Licensed under the [Apache 2.0 License](/LICENSE).
+
+## <picture><source height="20" width="20" media="(prefers-color-scheme: dark)" srcset="https://raw.githubusercontent.com/ibm-telemetry/telemetry-js/main/docs/images/ibm-telemetry-dark.svg"><source height="20" width="20" media="(prefers-color-scheme: light)" srcset="https://raw.githubusercontent.com/ibm-telemetry/telemetry-js/main/docs/images/ibm-telemetry-light.svg"><img height="20" width="20" alt="IBM Telemetry" src="https://raw.githubusercontent.com/ibm-telemetry/telemetry-js/main/docs/images/ibm-telemetry-light.svg"></picture> IBM Telemetry
+
+This package uses IBM Telemetry to collect metrics data. By installing this
+package as a dependency you are agreeing to telemetry collection. To opt out,
+see
+[Opting out of IBM Telemetry data collection](https://github.com/ibm-telemetry/telemetry-js/tree/main#opting-out-of-ibm-telemetry-data-collection).
+For more information on the data being collected, please see the
+[IBM Telemetry documentation](https://github.com/ibm-telemetry/telemetry-js/tree/main#ibm-telemetry-collection-basics).

New alerts

Install scripts

Supply chain risk

Install scripts are run when the package is installed. The majority of malware in npm is hidden in install scripts.

Found 1 instance in 1 package

No v1

Quality

Package is not semver >=1. This means it is not stable and does not support ^ ranges.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

107352

increased by1.38%

Number of package files

40

increased by2.56%

Number of lines in readme file

67

increased by15.52%

Worsened metrics

Dependency count

30

increased by3.45%

Number of low quality alerts

2

increased by100%

Number of high supply chain risk alerts

1

increased byInfinity%

Dependency changes

• + Added@ibm/telemetry-js@^1.2.1

• + Added@ibm/telemetry-js@1.5.2(transitive)

• Updatedtypescript-config-carbon@^0.2.0