@line/create-liff-app - npm Package Compare versions

Comparing version 1.1.0 to 1.1.1

create-liff-app.ts

@@ -1,4 +0,4 @@
-/* Copyright 2022 LINE Corporation
+/* Copyright 2023 LY Corporation
 
-* LINE Corporation licenses this file to you under the Apache License,
+* LY Corporation licenses this file to you under the Apache License,
 * version 2.0 (the "License"); you may not use this file except in compliance
@@ -387,2 +387,3 @@ * with the License. You may obtain a copy of the License at:
         target: 'server',
+        template: 'html',
         devTools: 'none',
@@ -389,0 +390,0 @@ vcs: 'none',

index.ts

 #!/usr/bin/env node
-/* Copyright 2022 LINE Corporation
+/* Copyright 2023 LY Corporation
 
-* LINE Corporation licenses this file to you under the Apache License,
+* LY Corporation licenses this file to you under the Apache License,
 * version 2.0 (the "License"); you may not use this file except in compliance
@@ -6,0 +6,0 @@ * with the License. You may obtain a copy of the License at:

LICENSE.txt

@@ -190,3 +190,3 @@
 
-Copyright 2022 LINE Corporation
+Copyright 2023 LY Corporation
 
@@ -193,0 +193,0 @@ Licensed under the Apache License, Version 2.0 (the "License");

package.json

 {
   "name": "@line/create-liff-app",
-  "version": "1.1.0",
+  "version": "1.1.1",
   "description": "Start developing LIFF application with a simple CLI command.",
@@ -5,0 +5,0 @@ "repository": {

README.md

@@ -19,3 +19,3 @@ # @line/create-liff-app
 ### LIFF
-LINE Front-end Framework (LIFF) is a platform for web apps provided by LINE. The web apps running on this platform are called LIFF apps.
+LINE Front-end Framework (LIFF) is a platform for web apps provided by LY Corporation. The web apps running on this platform are called LIFF apps.
 
@@ -22,0 +22,0 @@ Do you want to know more about LIFF? [Learn more](https://developers.line.biz/en/docs/liff/overview/)

New alerts

Deprecated

Maintenance

The maintainer of the package marked it as deprecated. This could indicate that a single version should not be used, or that the package is no longer maintained and any new vulnerabilities will not be fixed.

Found 1 instance in 1 package

New author

Supply chain risk

A new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.

Found 1 instance in 1 package

Fixed alerts

Dynamic require

Supply chain risk

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 2 instances in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

Improved metrics

Number of low supply chain risk alerts

2

decreased by-75%

Worsened metrics

Total package byte prevSize

92920

decreased by-18.02%

Number of package files

111

decreased by-3.48%

Lines of code

1282

decreased by-29.83%

Number of medium maintenance alerts

1

increased byInfinity%

Number of medium supply chain risk alerts

1

increased byInfinity%

No dependency changes