@contentful/cra-template-create-contentful-app - npm Package Compare versions

Comparing version 0.4.2 to 0.4.3-alpha.288

package.json

 {
   "name": "@contentful/cra-template-create-contentful-app",
-  "version": "0.4.2",
+  "version": "0.4.3-alpha.288+c9cf58b",
   "description": "A template for building Contentful Apps",
@@ -11,78 +11,15 @@ "author": "Contentful GmbH",
   },
-  "engines": {
-    "node": ">=12 <15",
-    "npm": ">=6 <7"
-  },
-  "main": "template.json",
+  "main": "../create-contentful-app/template.json",
   "files": [
-    "template",
-    "template.json",
-    "lib"
+    "../create-contentful-app/template",
+    "../create-contentful-app/template.json",
+    "../create-contentful-app/lib"
   ],
-  "config": {
-    "commitizen": {
-      "path": "node_modules/cz-customizable"
-    },
-    "cz-customizable": {
-      "config": "cz-customizable.config.js"
-    }
-  },
-  "lint-staged": {
-    "*.{js,jsx,ts,tsx}": [
-      "eslint --fix",
-      "prettier --write",
-      "git add"
-    ],
-    "*.css": [
-      "prettier --write",
-      "git add"
-    ]
-  },
-  "husky": {
-    "hooks": {
-      "pre-commit": "lint-staged",
-      "commit-msg": "commitlint -E HUSKY_GIT_PARAMS"
-    }
-  },
   "bin": {
-    "create-contentful-app": "lib/index.js"
+    "create-contentful-app": "../create-contentful-app/lib/index.js"
   },
   "scripts": {
-    "commit": "git-cz",
-    "prettier": "prettier **/*.{js,jsx,ts,tsx} scripts/**/*.js --write --ignore-path .gitignore",
-    "commitmsg": "validate-commit-msg",
-    "dev": "MODE=local node ./lib/index.js",
-    "publish-all": "node scripts/deploy.js",
-    "lint": "eslint ./lib ./scripts",
-    "lint:fix": "npm run lint -- --fix",
-    "test": "mocha ./test/*.test.js",
-    "test:watch": "npm t -- --watch"
+    "publish": "npm publish --dry-run"
   },
-  "dependencies": {
-    "chalk": "^4.1.0",
-    "contentful-management": "^7.5.1",
-    "create-react-app": "^4.0.1",
-    "cross-spawn": "^7.0.3",
-    "inquirer": "^8.0.0",
-    "open": "^8.0.1",
-    "tildify": "^2.0.0"
-  },
-  "devDependencies": {
-    "@commitlint/cli": "^12.0.0",
-    "@commitlint/config-conventional": "12.0.1",
-    "@octokit/rest": "18.5.2",
-    "babel-eslint": "10.1.0",
-    "commitizen": "^4.0.3",
-    "cz-customizable": "6.3.0",
-    "eslint": "7.23.0",
-    "eslint-config-prettier": "8.1.0",
-    "eslint-plugin-node": "11.1.0",
-    "husky": "^4.3.8",
-    "lint-staged": "10.5.4",
-    "mocha": "^8.2.1",
-    "prettier": "2.2.1",
-    "proxyquire": "^2.1.3",
-    "simple-git": "2.37.0",
-    "sinon": "^10.0.0"
-  }
+  "gitHead": "c9cf58bf5f89e8940b93c2571161065e1c8a0f46"
 }

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Empty package

Supply chain risk

Package does not contain any code. It may be removed, is name squatting, or the result of a faulty package publish.

Found 1 instance in 1 package

Major refactor

Supply chain risk

Package has recently undergone a major refactor. It may be unstable or indicate significant internal changes. Use caution when updating to versions that include significant changes.

Found 1 instance in 1 package

Manifest confusion

Supply chain risk

This package has inconsistent metadata. This could be malicious or caused by an error when publishing the package.

Found 1 instance in 1 package

No README

Quality

Package does not have a README. This may indicate a failed publish or a low quality package.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

New author

Supply chain risk

A new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 1 instance in 1 package

Improved metrics

Dependency count

0

decreased by-100%

Dev dependency count

0

decreased by-100%

Number of low supply chain risk alerts

0

decreased by-100%

Worsened metrics

Total package byte prevSize

1795

decreased by-93.54%

Number of package files

2

decreased by-93.1%

Lines of code

0

decreased by-100%

Number of medium quality alerts

2

increased by100%

Number of lines in readme file

0

decreased by-100%

Number of medium supply chain risk alerts

3

increased by200%

Dependency changes

• - Removedchalk@^4.1.0

• - Removedcontentful-management@^7.5.1

• - Removedcreate-react-app@^4.0.1

• - Removedcross-spawn@^7.0.3

• - Removedinquirer@^8.0.0

• - Removedopen@^8.0.1

• - Removedtildify@^2.0.0

• - Removed@types/json-patch@0.0.30(transitive)

• - Removedansi-escapes@4.3.2(transitive)

• - Removedansi-regex@5.0.1(transitive)

• - Removedansi-styles@4.3.0(transitive)

• - Removedat-least-node@1.0.0(transitive)

• - Removedaxios@0.21.4(transitive)

• - Removedbalanced-match@1.0.2(transitive)

• - Removedbase64-js@1.5.1(transitive)

• - Removedbl@4.1.0(transitive)

• - Removedblock-stream@0.0.9(transitive)

• - Removedbrace-expansion@1.1.11(transitive)

• - Removedbuffer@5.7.1(transitive)

• - Removedbuffer-from@0.1.2(transitive)

• - Removedbuiltins@1.0.3(transitive)

• - Removedcall-bind@1.0.7(transitive)

• - Removedchalk@4.1.04.1.2(transitive)

• - Removedchardet@0.7.0(transitive)

• - Removedcli-cursor@3.1.0(transitive)

• - Removedcli-spinners@2.9.2(transitive)

• - Removedcli-width@3.0.0(transitive)

• - Removedclone@1.0.4(transitive)

• - Removedcolor-convert@2.0.1(transitive)

• - Removedcolor-name@1.1.4(transitive)

• - Removedcommander@4.1.1(transitive)

• - Removedconcat-map@0.0.1(transitive)

• - Removedcontentful-management@7.54.2(transitive)

• - Removedcontentful-sdk-core@6.11.0(transitive)

• - Removedcore-util-is@1.0.3(transitive)

• - Removedcreate-react-app@4.0.3(transitive)

• - Removedcross-spawn@7.0.37.0.6(transitive)

• - Removeddebug@2.6.9(transitive)

• - Removeddefaults@1.0.4(transitive)

• - Removeddefine-data-property@1.1.4(transitive)

• - Removeddefine-lazy-prop@2.0.0(transitive)

• - Removedduplexer2@0.0.2(transitive)

• - Removedemoji-regex@8.0.0(transitive)

• - Removedenvinfo@7.7.3(transitive)

• - Removedes-define-property@1.0.0(transitive)

• - Removedes-errors@1.3.0(transitive)

• - Removedescape-string-regexp@1.0.5(transitive)

• - Removedexternal-editor@3.1.0(transitive)

• - Removedfast-copy@2.1.7(transitive)

• - Removedfigures@3.2.0(transitive)

• - Removedfollow-redirects@1.15.9(transitive)

• - Removedfs-extra@9.0.1(transitive)

• - Removedfs.realpath@1.0.0(transitive)

• - Removedfstream@1.0.12(transitive)

• - Removedfstream-ignore@1.0.5(transitive)

• - Removedfunction-bind@1.1.2(transitive)

• - Removedget-intrinsic@1.2.4(transitive)

• - Removedglob@7.2.3(transitive)

• - Removedgopd@1.1.0(transitive)

• - Removedgraceful-fs@4.2.11(transitive)

• - Removedhas-flag@4.0.0(transitive)

• - Removedhas-property-descriptors@1.0.2(transitive)

• - Removedhas-proto@1.0.3(transitive)

• - Removedhas-symbols@1.0.3(transitive)

• - Removedhasown@2.0.2(transitive)

• - Removedhyperquest@2.1.3(transitive)

• - Removediconv-lite@0.4.24(transitive)

• - Removedieee754@1.2.1(transitive)

• - Removedinflight@1.0.6(transitive)

• - Removedinherits@2.0.4(transitive)

• - Removedinquirer@8.2.6(transitive)

• - Removedis-docker@2.2.1(transitive)

• - Removedis-fullwidth-code-point@3.0.0(transitive)

• - Removedis-interactive@1.0.0(transitive)

• - Removedis-unicode-supported@0.1.0(transitive)

• - Removedis-wsl@2.2.0(transitive)

• - Removedisarray@0.0.11.0.0(transitive)

• - Removedisexe@2.0.0(transitive)

• - Removedjsonfile@6.1.0(transitive)

• - Removedkleur@3.0.3(transitive)

• - Removedlodash@4.17.21(transitive)

• - Removedlodash.isplainobject@4.0.6(transitive)

• - Removedlodash.isstring@4.0.1(transitive)

• - Removedlog-symbols@4.1.0(transitive)

• - Removedmimic-fn@2.1.0(transitive)

• - Removedminimatch@3.1.2(transitive)

• - Removedminimist@1.2.8(transitive)

• - Removedmkdirp@0.5.6(transitive)

• - Removedms@2.0.0(transitive)

• - Removedmute-stream@0.0.8(transitive)

• - Removedobject-inspect@1.13.3(transitive)

• - Removedonce@1.4.0(transitive)

• - Removedonetime@5.1.2(transitive)

• - Removedopen@8.4.2(transitive)

• - Removedora@5.4.1(transitive)

• - Removedos-tmpdir@1.0.2(transitive)

• - Removedp-throttle@4.1.1(transitive)

• - Removedpath-is-absolute@1.0.1(transitive)

• - Removedpath-key@3.1.1(transitive)

• - Removedprocess-nextick-args@2.0.1(transitive)

• - Removedprompts@2.4.0(transitive)

• - Removedqs@6.13.1(transitive)

• - Removedreadable-stream@1.0.341.1.142.3.83.6.2(transitive)

• - Removedrestore-cursor@3.1.0(transitive)

• - Removedrimraf@2.7.13.0.2(transitive)

• - Removedrun-async@2.4.1(transitive)

• - Removedrxjs@7.8.1(transitive)

• - Removedsafe-buffer@5.1.25.2.1(transitive)

• - Removedsafer-buffer@2.1.2(transitive)

• - Removedsemver@7.3.2(transitive)

• - Removedset-function-length@1.2.2(transitive)

• - Removedshebang-command@2.0.0(transitive)

• - Removedshebang-regex@3.0.0(transitive)

• - Removedside-channel@1.0.6(transitive)

• - Removedsignal-exit@3.0.7(transitive)

• - Removedsisteransi@1.0.5(transitive)

• - Removedstring-width@4.2.3(transitive)

• - Removedstring_decoder@0.10.311.1.11.3.0(transitive)

• - Removedstrip-ansi@6.0.1(transitive)

• - Removedsupports-color@7.2.0(transitive)

• - Removedtar@2.2.2(transitive)

• - Removedtar-pack@3.4.1(transitive)

• - Removedthrough@2.3.8(transitive)

• - Removedthrough2@0.6.5(transitive)

• - Removedtildify@2.0.0(transitive)

• - Removedtmp@0.0.330.2.1(transitive)

• - Removedtslib@2.8.1(transitive)

• - Removedtype-fest@0.21.32.19.0(transitive)

• - Removeduid-number@0.0.6(transitive)

• - Removeduniversalify@1.0.02.0.1(transitive)

• - Removedutil-deprecate@1.0.2(transitive)

• - Removedvalidate-npm-package-name@3.0.0(transitive)

• - Removedwcwidth@1.0.1(transitive)

• - Removedwhich@2.0.2(transitive)

• - Removedwrap-ansi@6.2.0(transitive)

• - Removedwrappy@1.0.2(transitive)

• - Removedxtend@4.0.2(transitive)