@endo/static-module-record - npm Package Compare versions

Comparing version 0.7.16 to 0.7.17

package.json

 {
   "name": "@endo/static-module-record",
-  "version": "0.7.16",
+  "version": "0.7.17",
   "description": "Shim for the SES StaticModuleRecord and module-to-program transformer",
@@ -22,3 +22,3 @@ "keywords": [
   "type": "module",
-  "types": "./index.d.ts",
+  "types": "./types.d.ts",
   "main": "./index.js",
@@ -43,9 +43,8 @@ "exports": {
     "@babel/types": "^7.17.0",
-    "ses": "^0.18.1"
+    "ses": "^0.18.2"
   },
   "devDependencies": {
-    "@ava/babel": "^1.0.1",
-    "@endo/eslint-config": "^0.5.2",
-    "@endo/ses-ava": "^0.2.37",
-    "ava": "^5.1.0",
+    "@endo/eslint-config": "^0.5.3",
+    "@endo/ses-ava": "^0.2.38",
+    "ava": "^5.2.0",
     "babel-eslint": "^10.0.3",
@@ -58,6 +57,6 @@ "benchmark": "^2.1.4",
     "eslint-plugin-eslint-comments": "^3.1.2",
-    "eslint-plugin-import": "^2.26.0",
+    "eslint-plugin-import": "^2.27.5",
     "eslint-plugin-prettier": "^3.4.1",
     "prettier": "^2.8.0",
-    "typescript": "~4.8.4"
+    "typescript": "~4.9.5"
   },
@@ -90,3 +89,3 @@ "files": [
   },
-  "gitHead": "ab8d64ae6fc9c628a2d1c02d16bf9ef249f5c8dc"
+  "gitHead": "0053227a37ee76ee8a3dce6059dd55140ed0ce6d"
 }

SECURITY.md

@@ -13,3 +13,3 @@ # Security Policy
 
-* Reporting the issue to the [Agoric HackerOne vulnerability rewards program](hackerone.com/agoric). 
+* Reporting the issue to the [Agoric HackerOne vulnerability rewards program](https://hackerone.com/agoric). 
 
@@ -16,0 +16,0 @@ * Sending an email to security at (@) agoric.com., encrypted or unencrypted. To encrypt, please use  @Warner’s personal GPG key  [A476E2E6 11880C98 5B3C3A39 0386E81B 11CAA07A](http://www.lothar.com/warner-gpg.html)  .

src/babelPlugin.js

@@ -320,2 +320,3 @@ /* eslint max-lines: 0 */
             }
+            /** @type {Array} */
             let myImports = imports[specifier];
@@ -322,0 +323,0 @@ if (!myImports) {

src/transformSource.js

 import * as babelParser from '@babel/parser';
 import babelGenerate from '@agoric/babel-generator';
 import babelTraverse from '@babel/traverse';
-import babelTypes from '@babel/types';
+import * as babelTypes from '@babel/types';
 
@@ -6,0 +6,0 @@ const parseBabel = babelParser.default

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

New author

Supply chain risk

A new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

50638

increased by0.04%

Dev dependency count

14

decreased by-6.67%

Lines of code

892

increased by0.11%

Worsened metrics

Number of medium supply chain risk alerts

1

increased byInfinity%

Dependency changes

• Updatedses@^0.18.2