@hapify/generator - npm Package Compare versions

Comparing version 1.0.0 to 1.1.0

CHANGELOG.md

@@ -6,2 +6,19 @@ # Changelog
 
+# @hapify/generator [1.1.0](https://github.com/hapify/hapify/compare/@hapify/generator@1.0.0...@hapify/generator@1.1.0) (2021-04-20)
+
+
+### Features
+
+* add CLI as package ([#19](https://github.com/hapify/hapify/issues/19)) ([8b59ac8](https://github.com/hapify/hapify/commit/8b59ac8e7d07465d96c6fe165ffff1159b7d7c3a))
+
+
+
+
+
+### Dependencies
+
+* **@hapify/ejs:** upgraded to 1.2.0
+* **@hapify/syntax:** upgraded to 1.2.0
+* **@hapify/vm:** upgraded to 1.3.0
+
 # @hapify/generator 1.0.0 (2021-04-16)
@@ -8,0 +25,0 @@

package.json

 {
   "name": "@hapify/generator",
-  "version": "1.0.0",
+  "version": "1.1.0",
   "description": "Generator for Hapify templates",
@@ -35,5 +35,5 @@ "keywords": [
   "dependencies": {
-    "@hapify/ejs": "1.1.0",
-    "@hapify/syntax": "1.1.0",
-    "@hapify/vm": "1.2.0",
+    "@hapify/ejs": "1.2.0",
+    "@hapify/syntax": "1.2.0",
+    "@hapify/vm": "1.3.0",
     "case": "^1.6.3"
@@ -40,0 +40,0 @@ },

New alerts

Uses eval

Supply chain risk

Package uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Found 1 instance in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

Fixed alerts

Major refactor

Supply chain risk

Package has recently undergone a major refactor. It may be unstable or indicate significant internal changes. Use caution when updating to versions that include significant changes.

Found 1 instance in 1 package

New author

Supply chain risk

A new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.

Found 1 instance in 1 package

Uses eval

Supply chain risk

Package uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Found 1 instance in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

93622

0.59%

Number of medium supply chain risk alerts

9

-18.18%

Dependency changes

• + Added

  @hapify/ejs@1.2.0
  (transitive)

• + Added

  @hapify/syntax@1.2.0
  (transitive)

• + Added

  @hapify/vm@1.3.0
  (transitive)

• - Removed

  @hapify/ejs@1.1.0
  (transitive)

• - Removed

  @hapify/syntax@1.1.0
  (transitive)

• - Removed

  @hapify/vm@1.2.0
  (transitive)

• Updated

  @hapify/ejs@1.2.0

• Updated

  @hapify/syntax@1.2.0

• Updated

  @hapify/vm@1.3.0