@easypost/api - npm Package Compare versions

Comparing version 3.9.1 to 3.10.0

package.json

 {
   "name": "@easypost/api",
   "description": "EasyPost Node Client Library",
-  "version": "3.9.1",
+  "version": "3.10.0",
   "author": "Easypost Engineering <[e-mail]>",
@@ -39,2 +39,4 @@ "homepage": "https://easypost.com",
     "@babel/core": "^7.7.5",
+    "@babel/plugin-proposal-nullish-coalescing-operator": "^7.7.4",
+    "@babel/plugin-proposal-optional-chaining": "^7.7.4",
     "@babel/plugin-proposal-class-properties": "^7.7.4",
@@ -48,6 +50,6 @@ "@babel/plugin-proposal-export-default-from": "^7.7.4",
     "@babel/register": "^7.7.4",
-    "@easypost/build": "^2.4.2",
+    "@easypost/build": "^2.4.3",
     "@easypost/eslint-config-easypost-base": "~1.0.3",
     "babel-eslint": "^10.0.1",
-    "babel-loader": "^8.0.6",
+    "babel-loader": "~8.0.6",
     "babel-plugin-istanbul": "^5.1.4",
@@ -54,0 +56,0 @@ "babel-plugin-transform-export-extensions": "^6.22.0",

README.md

@@ -5,3 +5,3 @@ # EasyPost Node Client Library
 
-[![Build Status](https://travis-ci.com/EasyPost/easypost-node.svg?branch=master)](https://travis-ci.com/EasyPost/easypost-node)
+[![CI](https://github.com/EasyPost/easypost-node/workflows/CI/badge.svg)](https://github.com/EasyPost/easypost-node/actions?query=workflow%3ACI)
 [![npm version](https://badge.fury.io/js/%40easypost%2Fapi.svg)](https://badge.fury.io/js/%40easypost%2Fapi)
@@ -178,2 +178,3 @@
 1. Update the `CHANGELOG` file
+1. Ensure that checked-in compiled assets are re-built with `npm run build`
 1. Tag the release on GitHub
@@ -180,0 +181,0 @@ 1. Publish the updated npm package

src/easypost.js

@@ -13,2 +13,3 @@ import os from 'os';
 import CustomsItem, { propTypes as customsItemPropTypes } from './resources/customsItem';
+import Event, { propTypes as eventPropTypes } from './resources/event';
 import Insurance, { propTypes as insurancePropTypes } from './resources/insurance';
@@ -18,2 +19,3 @@ import Order, { propTypes as orderPropTypes } from './resources/order';
 import Pickup, { propTypes as pickupPropTypes } from './resources/pickup';
+import Rate, { propTypes as ratePropTypes } from './resources/rate';
 import Report, { propTypes as reportPropTypes } from './resources/report';
@@ -67,2 +69,3 @@ import ScanForm, { propTypes as scanFormPropTypes } from './resources/scan_form';
   CustomsItem,
+  Event,
   Insurance,
@@ -72,2 +75,3 @@ Order,
   Pickup,
+  Rate,
   Report,
@@ -89,2 +93,3 @@ ScanForm,
   customsItemPropTypes,
+  eventPropTypes,
   insurancePropTypes,
@@ -94,2 +99,3 @@ orderPropTypes,
   pickupPropTypes,
+  ratePropTypes,
   reportPropTypes,
@@ -96,0 +102,0 @@ scanFormPropTypes,

src/resources/order.js

@@ -40,2 +40,6 @@ import T from 'proptypes';
 
+    static all() {
+      return this.notImplemented('all');
+    }
+
     static delete() {
@@ -42,0 +46,0 @@ return this.notImplemented('delete');

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 1 instance in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

New author

Supply chain risk

A new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.

Found 1 instance in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

2416625

increased by186.37%

Number of package files

70

increased by62.79%

Number of lines in readme file

195

increased by0.52%

Number of medium supply chain risk alerts

0

decreased by-100%

Worsened metrics

Dev dependency count

38

increased by5.56%

Lines of code

7721

decreased by-12.08%

Number of low supply chain risk alerts

33

increased by312.5%

No dependency changes