@getluko/mobile-release-process - npm Package Compare versions

Comparing version 0.0.2 to 0.0.3

package.json

 {
   "name": "@getluko/mobile-release-process",
-  "version": "0.0.2",
+  "version": "0.0.3",
   "author": "luko",
   "description": "Scripts to automate git flow used by mobile team to release",
-  "main": "build/index.js",
+  "main": "build/src/index.js",
   "repository": {
@@ -12,3 +12,3 @@ "type": "git",
   "bin": {
-    "mobile-release-process": "bin/cli"
+    "mobile-release-process": "./build/src/cli.js"
   },
@@ -20,4 +20,4 @@ "scripts": {
     "prettier": "prettier --write 'src/**/*.ts'",
-    "build": "tsc --build --force",
-    "play": "./bin/cli"
+    "build": "rimraf ./build && tsc --build --force",
+    "mobile-release-process": "./build/src/cli.js"
   },
@@ -30,3 +30,8 @@ "keywords": [],
     "listr": "^0.14.3",
-    "lodash": "^4.17.21"
+    "lodash": "^4.17.21",
+    "lodash.isarray": "^4.0.0",
+    "lodash.isempty": "^4.4.0",
+    "lodash.isnil": "^4.0.0",
+    "lodash.isstring": "^4.0.1",
+    "lodash.overevery": "^4.7.0"
   },
@@ -40,2 +45,7 @@ "devDependencies": {
     "@types/lodash": "^4.14.182",
+    "@types/lodash.isarray": "^4.0.7",
+    "@types/lodash.isempty": "^4.4.7",
+    "@types/lodash.isnil": "^4.0.7",
+    "@types/lodash.isstring": "^4.0.7",
+    "@types/lodash.overevery": "^4.7.7",
     "@types/node": "^17.0.21",
@@ -42,0 +52,0 @@ "@typescript-eslint/eslint-plugin": "^5.15.0",

New alerts

Major refactor

Supply chain risk

Package has recently undergone a major refactor. It may be unstable or indicate significant internal changes. Use caution when updating to versions that include significant changes.

Found 1 instance in 1 package

Network access

Supply chain risk

This module accesses the network.

Found 1 instance in 1 package

New author

Supply chain risk

A new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.

Found 1 instance in 1 package

Shell access

Supply chain risk

This module accesses the system shell. Accessing the system shell increases the risk of executing arbitrary code.

Found 1 instance in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

Fixed alerts

Empty package

Supply chain risk

Package does not contain any code. It may be removed, is name squatting, or the result of a faulty package publish.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

84173

increased by2304.94%

Number of package files

67

increased by1575%

Lines of code

1825

increased byInfinity%

Worsened metrics

Dependency count

9

increased by125%

Dev dependency count

22

increased by29.41%

Number of low supply chain risk alerts

6

increased byInfinity%

Number of medium supply chain risk alerts

4

increased by300%

Dependency changes

• + Addedlodash.isarray@^4.0.0

• + Addedlodash.isempty@^4.4.0

• + Addedlodash.isnil@^4.0.0

• + Addedlodash.isstring@^4.0.1

• + Addedlodash.overevery@^4.7.0

• + Addedlodash.isarray@4.0.0(transitive)

• + Addedlodash.isempty@4.4.0(transitive)

• + Addedlodash.isnil@4.0.0(transitive)

• + Addedlodash.isstring@4.0.1(transitive)

• + Addedlodash.overevery@4.7.0(transitive)