@graphql-toolkit/github-loader - npm Package Compare versions

Comparing version 0.6.8-alpha-23bbb51.1 to 0.6.8-alpha-2cde5e8.4

dist/commonjs/index.js

 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 const graphql_1 = require("graphql");
-const cross_fetch_1 = require("cross-fetch");
 // github:owner/name#ref:path/to/file
@@ -26,3 +25,4 @@ function extractData(pointer) {
         const { owner, name, ref, path } = extractData(pointer);
-        const request = await cross_fetch_1.fetch('https://api.github.com/graphql', {
+        const { fetch } = await Promise.resolve().then(() => require('cross-fetch'));
+        const request = await fetch('https://api.github.com/graphql', {
             method: 'POST',
@@ -29,0 +29,0 @@ headers: {

dist/esnext/index.js

 import { buildClientSchema, printSchema, parse } from 'graphql';
-import { fetch } from 'cross-fetch';
 // github:owner/name#ref:path/to/file
@@ -24,2 +23,3 @@ function extractData(pointer) {
         const { owner, name, ref, path } = extractData(pointer);
+        const { fetch } = await import('cross-fetch');
         const request = await fetch('https://api.github.com/graphql', {
@@ -26,0 +26,0 @@ method: 'POST',

package.json

 {
   "name": "@graphql-toolkit/github-loader",
-  "version": "0.6.8-alpha-23bbb51.1+23bbb51",
+  "version": "0.6.8-alpha-2cde5e8.4+2cde5e8",
   "description": "A set of utils for faster development of GraphQL tools",
@@ -26,6 +26,6 @@ "repository": "[e-mail]:dotansimha/graphql-toolkit.git",
     "graphql": "14.5.8",
-    "typescript": "3.6.4"
+    "typescript": "3.7.2"
   },
   "dependencies": {
-    "@graphql-toolkit/common": "0.6.8-alpha-23bbb51.1+23bbb51",
+    "@graphql-toolkit/common": "0.6.8-alpha-2cde5e8.4+2cde5e8",
     "cross-fetch": "3.0.4"
@@ -36,3 +36,3 @@ },
   },
-  "gitHead": "23bbb512598c95e67ba4476ca410e7049655db02"
+  "gitHead": "2cde5e8f3f6632320d783b2bebf7b57e7274a778"
 }

New alerts

Manifest confusion

Supply chain risk

This package has inconsistent metadata. This could be malicious or caused by an error when publishing the package.

Found 1 instance in 1 package

Fixed alerts

Manifest confusion

Supply chain risk

This package has inconsistent metadata. This could be malicious or caused by an error when publishing the package.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

13197

increased by0.78%

Worsened metrics

Number of medium supply chain risk alerts

3

increased by50%

Dependency changes

• Updated@graphql-toolkit/common@0.6.8-alpha-2cde5e8.4+2cde5e8