@graphiql/toolkit - npm Package Compare versions

Comparing version 0.2.2 to 0.3.0

CHANGELOG.md

 # @graphiql/toolkit
 
+## 0.3.0
+
+### Minor Changes
+
+- [`6a459f4c`](https://github.com/graphql/graphiql/commit/6a459f4c235bb0d70725ae6ad7fc1cfa34f49dca) [#1968](https://github.com/graphql/graphiql/pull/1968) Thanks [@acao](https://github.com/acao)! - Remove `optionalDependencies` entirely, remove `subscriptions-transport-ws` which introduces vulnerabilities, upgrade `@n1ru4l/push-pull-async-iterable-iterator` to 3.0.0, upgrade `graphql-ws` several minor versions - the `graphql-ws@5.x` upgrade will come in a later minor release.
+
 ## 0.2.2
@@ -4,0 +10,0 @@

package.json

 {
   "name": "@graphiql/toolkit",
-  "version": "0.2.2",
+  "version": "0.3.0",
   "description": "Utility to build a fetcher for GraphiQL",
@@ -23,4 +23,4 @@ "contributors": [
   "dependencies": {
-    "@n1ru4l/push-pull-async-iterable-iterator": "^2.1.4",
-    "graphql-ws": "^4.3.2",
+    "@n1ru4l/push-pull-async-iterable-iterator": "^3.0.0",
+    "graphql-ws": "^4.9.0",
     "meros": "^1.1.4"
@@ -31,9 +31,6 @@ },
     "isomorphic-fetch": "^3.0.0",
-    "subscriptions-transport-ws": "^0.9.18"
+    "subscriptions-transport-ws": "^0.9.19"
   },
-  "optionalDependencies": {
-    "subscriptions-transport-ws": "^0.9.18"
-  },
   "peerDependencies": {
-    "graphql": ">= v14.5.0 <= 15.5.0"
+    "graphql": ">= v14.5.0 <= 15.6.1"
   },
@@ -40,0 +37,0 @@ "keywords": [

README.md

@@ -0,1 +1,3 @@
+[Discord Channel](https://discord.gg/NP5vbPeUFp)
+
 # `@graphiql/toolkit`
@@ -5,3 +7,3 @@
 
-Part of the GraphiQL 2.0.0 initiative.
+A core dependency of the GraphiQL 2.0.0 initiative.
 
@@ -16,4 +18,4 @@ ## Docs
 - [x] Begin porting common type definitions used by GraphiQL and it's dependencies
-- [ ] `createFetcher` utility for an easier `fetcher`
+- [x] `createGraphiQLFetcher` utility for an easier `fetcher`
 - [ ] Migrate over general purpose `graphiql/src/utilities`
 - [ ] Utility to generate json schema spec from `getQueryFacts` for monaco, vscode, etc

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Improved metrics

Dependency count

4

decreased by-20%

Number of lines in readme file

20

increased by11.11%

Worsened metrics

Total package byte prevSize

397259

decreased by-0.72%

Dependency changes

• + Added@n1ru4l/push-pull-async-iterable-iterator@3.2.0(transitive)

• + Addedgraphql@15.6.1(transitive)

• - Removed@n1ru4l/push-pull-async-iterable-iterator@2.1.4(transitive)

• - Removedbacko2@1.0.2(transitive)

• - Removedeventemitter3@3.1.2(transitive)

• - Removedgraphql@15.5.0(transitive)

• - Removediterall@1.3.0(transitive)

• - Removedsubscriptions-transport-ws@0.9.19(transitive)

• - Removedsymbol-observable@1.2.0(transitive)

• - Removedws@7.5.10(transitive)

• Updated@n1ru4l/push-pull-async-iterable-iterator@^3.0.0

• Updatedgraphql-ws@^4.9.0