@foal/core - npm Package Compare versions

Comparing version 0.4.0-beta.3 to 0.5.0-alpha.1.0

package.json

 {
   "name": "@foal/core",
-  "version": "0.4.0-beta.3",
+  "version": "0.5.0-alpha.1.0",
   "description": "A high-level Node.JS framework to quickly build web apps in TypeScript.",
-  "main": "./dist/index.js",
-  "types": "./dist/index.d.ts",
+  "main": "./lib/index.js",
+  "types": "./lib/index.d.ts",
   "scripts": {
     "test": "mocha --require ts-node/register \"./src/**/*.spec.ts\"",
     "dev:test": "mocha --require ts-node/register --watch --watch-extensions ts \"./src/**/*.spec.ts\"",
-    "build": "gulp clean && tsc -p tsconfig-build.json && gulp add-header",
-    "prepublish": "gulp clean && tsc -p tsconfig-build.json && gulp add-header"
+    "build": "rimraf lib && tsc -p tsconfig-build.json",
+    "prepublish": "npm run build"
   },
@@ -40,20 +40,35 @@ "engines": {
   "files": [
-    "dist/"
+    "lib/"
   ],
   "dependencies": {
+    "ajv": "^6.5.0",
+    "body-parser": "^1.18.2",
+    "csurf": "^1.9.0",
+    "express": "^4.16.3",
+    "express-session": "^1.15.6",
+    "helmet": "^3.12.1",
+    "morgan": "^1.9.0",
     "reflect-metadata": "^0.1.10"
   },
+  "peerDependencies": {
+    "typeorm": "^0.2.6"
+  },
   "devDependencies": {
+    "@foal/ejs": "^0.5.0-alpha.1.0",
     "@types/chai": "^4.0.4",
+    "@types/chai-as-promised": "^7.1.0",
     "@types/chai-spies": "0.0.0",
     "@types/mocha": "^2.2.43",
+    "@types/node": "^10.1.2",
     "chai": "^4.1.2",
+    "chai-as-promised": "^7.1.1",
     "chai-spies": "^1.0.0",
-    "del": "^3.0.0",
-    "gulp": "^3.9.1",
-    "gulp-header": "^1.8.9",
     "mocha": "^3.5.3",
+    "mysql": "^2.15.0",
+    "rimraf": "^2.6.2",
+    "supertest": "^3.1.0",
     "ts-node": "^3.3.0",
+    "typeorm": "^0.2.6",
     "typescript": "^2.5.2"
   }
 }

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Major refactor

Supply chain risk

Package has recently undergone a major refactor. It may be unstable or indicate significant internal changes. Use caution when updating to versions that include significant changes.

Found 1 instance in 1 package

Dynamic require

Supply chain risk

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 2 instances in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

120524

increased by234.31%

Number of package files

198

increased by340%

Lines of code

1825

increased by93.74%

Worsened metrics

Dependency count

9

increased by800%

Dev dependency count

16

increased by45.45%

Number of low supply chain risk alerts

5

increased byInfinity%

Number of medium supply chain risk alerts

1

increased byInfinity%

Dependency changes

• + Addedajv@^6.5.0

• + Addedbody-parser@^1.18.2

• + Addedcsurf@^1.9.0

• + Addedexpress@^4.16.3

• + Addedexpress-session@^1.15.6

• + Addedhelmet@^3.12.1

• + Addedmorgan@^1.9.0

• + Added@sqltools/formatter@1.2.5(transitive)

• + Addedaccepts@1.3.8(transitive)

• + Addedajv@6.12.6(transitive)

• + Addedansi-regex@5.0.1(transitive)

• + Addedansi-styles@4.3.0(transitive)

• + Addedany-promise@1.3.0(transitive)

• + Addedapp-root-path@3.1.0(transitive)

• + Addedargparse@2.0.1(transitive)

• + Addedarray-flatten@1.1.1(transitive)

• + Addedbalanced-match@1.0.2(transitive)

• + Addedbase64-js@1.5.1(transitive)

• + Addedbasic-auth@2.0.1(transitive)

• + Addedbody-parser@1.20.3(transitive)

• + Addedbowser@2.9.0(transitive)

• + Addedbrace-expansion@1.1.11(transitive)

• + Addedbuffer@6.0.3(transitive)

• + Addedbytes@3.1.2(transitive)

• + Addedcall-bind@1.0.7(transitive)

• + Addedcamelize@1.0.0(transitive)

• + Addedchalk@4.1.2(transitive)

• + Addedcli-highlight@2.1.11(transitive)

• + Addedcliui@7.0.48.0.1(transitive)

• + Addedcolor-convert@2.0.1(transitive)

• + Addedcolor-name@1.1.4(transitive)

• + Addedconcat-map@0.0.1(transitive)

• + Addedcontent-disposition@0.5.4(transitive)

• + Addedcontent-security-policy-builder@2.1.0(transitive)

• + Addedcontent-type@1.0.5(transitive)

• + Addedcookie@0.4.00.6.0(transitive)

• + Addedcookie-signature@1.0.61.0.7(transitive)

• + Addedcsrf@3.1.0(transitive)

• + Addedcsurf@1.11.0(transitive)

• + Addeddasherize@2.0.0(transitive)

• + Addeddebug@2.6.94.3.7(transitive)

• + Addeddefine-data-property@1.1.4(transitive)

• + Addeddepd@1.1.22.0.0(transitive)

• + Addeddestroy@1.2.0(transitive)

• + Addeddont-sniff-mimetype@1.1.0(transitive)

• + Addeddotenv@8.6.0(transitive)

• + Addedee-first@1.1.1(transitive)

• + Addedemoji-regex@8.0.0(transitive)

• + Addedencodeurl@1.0.22.0.0(transitive)

• + Addedes-define-property@1.0.0(transitive)

• + Addedes-errors@1.3.0(transitive)

• + Addedescalade@3.2.0(transitive)

• + Addedescape-html@1.0.3(transitive)

• + Addedetag@1.8.1(transitive)

• + Addedexpress@4.21.0(transitive)

• + Addedexpress-session@1.18.0(transitive)

• + Addedfast-deep-equal@3.1.3(transitive)

• + Addedfast-json-stable-stringify@2.1.0(transitive)

• + Addedfeature-policy@0.3.0(transitive)

• + Addedfinalhandler@1.3.1(transitive)

• + Addedforwarded@0.2.0(transitive)

• + Addedfresh@0.5.2(transitive)

• + Addedfs.realpath@1.0.0(transitive)

• + Addedfunction-bind@1.1.2(transitive)

• + Addedget-caller-file@2.0.5(transitive)

• + Addedget-intrinsic@1.2.4(transitive)

• + Addedglob@7.2.3(transitive)

• + Addedgopd@1.0.1(transitive)

• + Addedhas-flag@4.0.0(transitive)

• + Addedhas-property-descriptors@1.0.2(transitive)

• + Addedhas-proto@1.0.3(transitive)

• + Addedhas-symbols@1.0.3(transitive)

• + Addedhasown@2.0.2(transitive)

• + Addedhelmet@3.23.3(transitive)

• + Addedhelmet-crossdomain@0.4.0(transitive)

• + Addedhelmet-csp@2.10.0(transitive)

• + Addedhide-powered-by@1.1.0(transitive)

• + Addedhighlight.js@10.7.3(transitive)

• + Addedhpkp@2.0.0(transitive)

• + Addedhsts@2.2.0(transitive)

• + Addedhttp-errors@1.7.32.0.0(transitive)

• + Addediconv-lite@0.4.24(transitive)

• + Addedieee754@1.2.1(transitive)

• + Addedinflight@1.0.6(transitive)

• + Addedinherits@2.0.4(transitive)

• + Addedipaddr.js@1.9.1(transitive)

• + Addedis-fullwidth-code-point@3.0.0(transitive)

• + Addedjs-yaml@4.1.0(transitive)

• + Addedjson-schema-traverse@0.4.1(transitive)

• + Addedmedia-typer@0.3.0(transitive)

• + Addedmerge-descriptors@1.0.3(transitive)

• + Addedmethods@1.1.2(transitive)

• + Addedmime@1.6.0(transitive)

• + Addedmime-db@1.52.0(transitive)

• + Addedmime-types@2.1.35(transitive)

• + Addedminimatch@3.1.2(transitive)

• + Addedmkdirp@1.0.4(transitive)

• + Addedmorgan@1.10.0(transitive)

• + Addedms@2.0.02.1.3(transitive)

• + Addedmz@2.7.0(transitive)

• + Addednegotiator@0.6.3(transitive)

• + Addednocache@2.1.0(transitive)

• + Addedobject-assign@4.1.1(transitive)

• + Addedobject-inspect@1.13.2(transitive)

• + Addedon-finished@2.3.02.4.1(transitive)

• + Addedon-headers@1.0.2(transitive)

• + Addedonce@1.4.0(transitive)

• + Addedparse5@5.1.16.0.1(transitive)

• + Addedparse5-htmlparser2-tree-adapter@6.0.1(transitive)

• + Addedparseurl@1.3.3(transitive)

• + Addedpath-is-absolute@1.0.1(transitive)

• + Addedpath-to-regexp@0.1.10(transitive)

• + Addedproxy-addr@2.0.7(transitive)

• + Addedpunycode@2.3.1(transitive)

• + Addedqs@6.13.0(transitive)

• + Addedrandom-bytes@1.0.0(transitive)

• + Addedrange-parser@1.2.1(transitive)

• + Addedraw-body@2.5.2(transitive)

• + Addedreferrer-policy@1.2.0(transitive)

• + Addedrequire-directory@2.1.1(transitive)

• + Addedrndm@1.2.0(transitive)

• + Addedsafe-buffer@5.1.25.2.1(transitive)

• + Addedsafer-buffer@2.1.2(transitive)

• + Addedsax@1.4.1(transitive)

• + Addedsend@0.19.0(transitive)

• + Addedserve-static@1.16.2(transitive)

• + Addedset-function-length@1.2.2(transitive)

• + Addedsetprototypeof@1.1.11.2.0(transitive)

• + Addedsha.js@2.4.11(transitive)

• + Addedside-channel@1.0.6(transitive)

• + Addedstatuses@1.5.02.0.1(transitive)

• + Addedstring-width@4.2.3(transitive)

• + Addedstrip-ansi@6.0.1(transitive)

• + Addedsupports-color@7.2.0(transitive)

• + Addedthenify@3.3.1(transitive)

• + Addedthenify-all@1.6.0(transitive)

• + Addedtoidentifier@1.0.01.0.1(transitive)

• + Addedtslib@2.7.0(transitive)

• + Addedtsscmp@1.0.6(transitive)

• + Addedtype-is@1.6.18(transitive)

• + Addedtypeorm@0.2.45(transitive)

• + Addeduid-safe@2.1.5(transitive)

• + Addedunpipe@1.0.0(transitive)

• + Addeduri-js@4.4.1(transitive)

• + Addedutils-merge@1.0.1(transitive)

• + Addeduuid@8.3.2(transitive)

• + Addedvary@1.1.2(transitive)

• + Addedwrap-ansi@7.0.0(transitive)

• + Addedwrappy@1.0.2(transitive)

• + Addedx-xss-protection@1.3.0(transitive)

• + Addedxml2js@0.4.23(transitive)

• + Addedxmlbuilder@11.0.1(transitive)

• + Addedy18n@5.0.8(transitive)

• + Addedyargs@16.2.017.7.2(transitive)

• + Addedyargs-parser@20.2.921.1.1(transitive)

• + Addedzen-observable@0.8.15(transitive)

• + Addedzen-observable-ts@1.2.5(transitive)