@hafslundnett/hdd-style - npm Package Compare versions

Comparing version 0.3.29 to 1.0.0-cdnfix.0

package.json

 {
   "name": "@hafslundnett/hdd-style",
-  "version": "0.3.29",
+  "version": "1.0.0-cdnfix.0",
   "description": "A universal design system used across Hafslund nett",
@@ -9,16 +9,19 @@ "repository": "https://github.com/hafslundnett/hdd-theme",
   "scripts": {
-    "serve": "node scripts/server.js",
-    "watch": "node scripts/watch.js",
-    "build": "node scripts/build.js",
-    "lint": "sass-lint",
+    "build": "node scripts/build.js && stylemark -i styleguide/lib -o docs -c stylemark.yml",
+    "lint": "sass-lint -v -q",
     "commit": "git cz",
-    "push": "npm run build; npm publish --access=public"
+    "push": "npm run build; npm publish --access=public",
+    "start": "npm run build -- -w -b"
   },
   "devDependencies": {
+    "autoprefixer": "^9.1.0",
+    "commitizen": "^2.10.1",
+    "cssnano": "^4.0.5",
     "cz-conventional-changelog": "^2.1.0",
-    "mime": "^2.3.1",
-    "node-sass": "^4.9.0",
+    "node-sass": "^4.9.2",
     "node-watch": "^0.5.8",
-    "opn": "^5.3.0",
-    "sass-lint": "^1.12.1"
+    "ora": "^3.0.0",
+    "postcss": "^7.0.2",
+    "sass-lint": "^1.12.1",
+    "stylemark": "^3.0.2"
   },
@@ -29,3 +32,8 @@ "config": {
     }
-  }
+  },
+  "browserslist": [
+    "> 1%",
+    "last 4 versions",
+    "not ie <= 8"
+  ]
 }

README.md

 # Hafslund digital designsystem (Hdd)
 
-> 🚧 WARNING: This project is under construction and should not be used in production! 🚧
+[![npm version](https://img.shields.io/npm/v/@hafslundnett/hdd-style.svg)](https://www.npmjs.com/package/@hafslundnett/hdd-style)
+[![Commitizen friendly](https://img.shields.io/badge/commitizen-friendly-brightgreen.svg)](http://commitizen.github.io/cz-cli/)
 
@@ -18,5 +19,6 @@ 'Hafslund digital designsystem' is a design system that can be used across projects while maintaining consistancy. The project follows strict naming guidlines, your can read more about them in the [wiki](https://github.com/hafslundnett/hdd-theme/wiki/Naming-guidelines). Every component should be able to run in a isolated environment without depending on parent classes/elements.
 
-`npm run serve`
+* `yarn`
+* `yarn start`
 
-You need to have `node` and `npm` installed in order to start the showoff website.
+You need to have `node` and `yarn` installed in order to start the showoff website.
 
@@ -38,2 +40,14 @@ ## Code of conduct
 
+## Releasing new versions and updating CDN
+Azure CDN is used to host fonts and icons from the `cdn/` folder. To update the contents of the CDN server you'll have to do the following:
+
+1. Check in the new files under `cdn/`.
+2. If this will be included in a new version of the package: Update the package version in `package.json` and the CDN-url in `variables/fontawesome/_variables.scss`. The three numbers after "hdd-style-release-" should match the package version. If the package version is 1.0.2, then the url bound to `$fa-font-path` should be `https://hafslundnett.azureedge.net/hdd-style-release-1-0-2/icons`.
+3. Check in and get your pull request accepted into develop.
+4. Create a new release-branch and push it to GitHub. The name of the branch should be on the format `release/1.0.2`, given that the package version is 1.0.2. This will start the hdd-style.release build, and upload the contents of `cdn/` to Azure CDN.
+5. Continue to release the new version of hdd-style by packaging and uploading the new version to npm manually.
+6. When everything is ok, merge the release-branch into master, and draft a new release on GitHub.
+
+_**Note:** This process has [room for improvements](https://github.com/hafslundnett/hdd-style/issues/92)._
+
 ## Team
@@ -40,0 +54,0 @@

New alerts

Native code

Supply chain risk

Contains native code (e.g., compiled binaries or shared libraries). Including native code can obscure malicious behavior.

Found 1 instance in 1 package

Major refactor

Supply chain risk

Package has recently undergone a major refactor. It may be unstable or indicate significant internal changes. Use caution when updating to versions that include significant changes.

Found 1 instance in 1 package

Dynamic require

Supply chain risk

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

Found 1 instance in 1 package

Minified code

Quality

This package contains minified code. This may be harmless in some cases where minified code is included in packaged libraries, however packages on npm should not minify code.

Found 1 instance in 1 package

Fixed alerts

Native code

Supply chain risk

Contains native code (e.g., compiled binaries or shared libraries). Including native code can obscure malicious behavior.

Found 1 instance in 1 package

Improved metrics

Number of package files

197

increased by77.48%

Lines of code

3052

increased by34.69%

Number of lines in readme file

55

increased by34.15%

Worsened metrics

Total package byte prevSize

1540471

decreased by-12.22%

Dev dependency count

10

increased by66.67%

Number of low quality alerts

3

increased by50%

Number of low supply chain risk alerts

3

increased by200%

Number of medium supply chain risk alerts

24

increased by33.33%

No dependency changes