@exodus/trezor-meta - npm Package Compare versions

Comparing version 3.3.6 to 3.3.7

package.json

 {
   "name": "@exodus/trezor-meta",
-  "version": "3.3.6",
+  "version": "3.3.7",
   "description": "trezor constants, firmware, and utils",
@@ -9,3 +9,4 @@ "main": "src/index.js",
   "files": [
-    "src/**"
+    "src/**",
+    "!src/__tests__/**"
   ],
@@ -55,3 +56,2 @@ "scripts": {
   "dependencies": {
-    "lodash": "^4.17.19",
     "semver": "^6.3.0"
@@ -58,0 +58,0 @@ },

src/meta.js

@@ -1,6 +0,10 @@
-const difference = require('lodash/difference')
-const uniq = require('lodash/uniq')
 const constants = require('./constants')
 const coinUtil = require('./coin-util')
 
+const uniq = (arr) => [...new Set(arr)]
+const difference = (arr1, arr2) => {
+  const set2 = new Set(arr2)
+  return arr1.filter((x) => !set2.has(x))
+}
+
 module.exports = (assets) => {
@@ -7,0 +11,0 @@ const ERC20_TOKEN_NAMES = Object.keys(assets).filter(

New alerts

New author

Supply chain risk

A new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

26458

increased by0.25%

Dependency count

1

decreased by-50%

Lines of code

930

increased by0.32%

Worsened metrics

Number of medium supply chain risk alerts

1

increased byInfinity%

Dependency changes

• - Removedlodash@^4.17.19

• - Removedlodash@4.17.21(transitive)