@influxdata/giraffe - npm Package Compare versions

Comparing version 0.13.0 to 0.14.0

CONTRIBUTING.md

@@ -52,7 +52,13 @@ ## Development
 
-Ensure that you have administrator access to this repo and to the [influxdata](https://www.npmjs.com/org/influxdata) organization on npm.
-Then run:
+Ensure that 
 
+- You have administrator access to this repo on GitHub
+- You have permissions to publish to the [influxdata](https://www.npmjs.com/org/influxdata) organization on npm
+- You are logged into Yarn (`yarn login`)
+- You are on `master` and the working tree is clean
+
+Then run the publish script in the root of the repo:
+
 ```
-yarn publish --access public
+./publish
 ```

package.json

 {
   "name": "@influxdata/giraffe",
-  "version": "0.13.0",
+  "version": "0.14.0",
   "main": "dist/index.js",
-  "module": "dist/index.mjs",
   "license": "MIT",
@@ -13,4 +12,2 @@ "scripts": {
     "typecheck": "tsc --noEmit --pretty",
-    "preversion": "yarn install --frozen-lockfile && yarn run test && yarn run build",
-    "postversion": "git push --tags && echo \"Successfully released version $npm_package_version!\"",
     "storybook": "start-storybook -p 50000",
@@ -17,0 +14,0 @@ "publishStorybook": "storybook-to-ghpages --out=.out",

rollup.config.js

@@ -46,14 +46,2 @@ import resolve from 'rollup-plugin-node-resolve'
   },
-  {
-    input,
-    plugins,
-    external,
-    output: {
-      name: pkg.name,
-      file: pkg.module,
-      format: 'esm',
-      sourcemap: true,
-      globals,
-    },
-  },
 ]

Fixed alerts

Uses eval

Supply chain risk

Package uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Found 1 instance in 1 package

Improved metrics

Number of medium supply chain risk alerts

1

decreased by-50%

Worsened metrics

Total package byte prevSize

9104753

decreased by-5.76%

Number of package files

6958

decreased by-0.03%

Lines of code

10942

decreased by-3.49%

No dependency changes