@influxdata/flux-lsp-cli - npm Package Compare versions

Comparing version 0.5.5 to 0.5.6

.eslintrc.js

@@ -5,3 +5,4 @@ module.exports = {
     es6: true,
-    node: true
+    node: true,
+    mocha: true
   },
@@ -8,0 +9,0 @@ extends: [

package.json

 {
   "name": "@influxdata/flux-lsp-cli",
-  "version": "0.5.5",
+  "version": "0.5.6",
   "description": "Flux cli LSP server",
@@ -11,6 +11,4 @@ "repository": {
   "scripts": {
-    "test": "echo \"Error: no test specified\" && exit 1",
-    "lint": "eslint .",
-    "bundle": "rollup --config rollup.config.js",
-    "prepublishOnly": "./build.sh"
+    "test": "mocha test/**/*_test.js",
+    "lint": "eslint ."
   },
@@ -33,4 +31,2 @@ "keywords": [
   "devDependencies": {
-    "rollup": "^1.27.8",
-    "@rollup/plugin-node-resolve": "^6.0.0",
     "eslint": "^6.7.2",
@@ -42,5 +38,5 @@ "eslint-config-standard": "^14.1.0",
     "eslint-plugin-standard": "^4.0.1",
-    "rollup-plugin-commonjs": "^10.1.0",
-    "rollup-plugin-preserve-shebangs": "^0.1.2"
+    "expect": "^25.1.0",
+    "mocha": "^7.1.0"
   }
 }

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Major refactor

Supply chain risk

Package has recently undergone a major refactor. It may be unstable or indicate significant internal changes. Use caution when updating to versions that include significant changes.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Native code

Supply chain risk

Contains native code (e.g., compiled binaries or shared libraries). Including native code can obscure malicious behavior.

Found 1 instance in 1 package

Major refactor

Supply chain risk

Package has recently undergone a major refactor. It may be unstable or indicate significant internal changes. Use caution when updating to versions that include significant changes.

Found 1 instance in 1 package

Dynamic require

Supply chain risk

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 1 instance in 1 package

No tests

Quality

Package does not have any tests. This is a strong signal of a poorly maintained or low quality package.

Found 1 instance in 1 package

Improved metrics

Dev dependency count

8

decreased by-20%

Number of low quality alerts

2

decreased by-33.33%

Number of low supply chain risk alerts

1

decreased by-83.33%

Number of medium supply chain risk alerts

1

decreased by-50%

Worsened metrics

Total package byte prevSize

7972

decreased by-99.71%

Number of package files

10

decreased by-33.33%

Lines of code

103

decreased by-97.09%

No dependency changes