@liveblocks/core - npm Package Compare versions

Comparing version 3.18.2 to 3.18.3-test1

LICENSE

+Copyright 2021-present Liveblocks
+
+This repository contains software under two licenses:
+
+1. Most of the code in this repository is licensed under the
+   Apache License 2.0 — see licenses/LICENSE-APACHE-2.0 for the
+   full license text.
+
+2. The following components are licensed under the
+   GNU Affero General Public License v3.0 or later (AGPL-3.0-or-later)
+   — see licenses/LICENSE-AGPL-3.0 for the full license text:
+
+   - packages/liveblocks-server (published as @liveblocks/server)
+   - tools/liveblocks-cli (published as liveblocks)
+
+Each package's own LICENSE or package.json specifies its applicable license.

package.json

 {
   "name": "@liveblocks/core",
-  "version": "3.18.2",
+  "version": "3.18.3-test1",
   "description": "Private internals for Liveblocks. DO NOT import directly from this package!",
@@ -34,28 +34,16 @@ "type": "module",
   },
-  "scripts": {
-    "dev": "tsup --watch",
-    "build": "tsup && node dist/index.js",
-    "format": "(eslint --fix src/ e2e/ || true) && prettier --write src/ e2e/",
-    "lint": "eslint src/",
-    "lint:package": "publint --strict && attw --pack",
-    "test": "npx liveblocks dev -p 1154 -c 'vitest run --coverage'",
-    "test:ci": "vitest run",
-    "test:types": "vitest run --config ./vitest.config.typecheck.ts",
-    "test:watch": "NODE_OPTIONS=\"--no-deprecation\" vitest",
-    "test:e2e": "npx liveblocks dev -p 1154 -c 'vitest run --config=./vitest.config.e2e.ts'",
-    "test:deps": "depcruise src --exclude __tests__",
-    "showdeps": "depcruise src --include-only '^src' --exclude='__tests__' --output-type dot | dot -T svg > /tmp/dependency-graph.svg && open /tmp/dependency-graph.svg",
-    "showdeps:high-level": "depcruise src --include-only '^src' --exclude='(^src/index.ts|shallow.ts|__tests__)' --collapse='^src/(refs|lib|compat|types|crdts|protocol)' --output-type dot | dot -T svg > /tmp/dependency-graph.svg && open /tmp/dependency-graph.svg"
-  },
   "license": "Apache-2.0",
   "author": "Liveblocks Inc.",
   "devDependencies": {
-    "@liveblocks/eslint-config": "*",
     "@liveblocks/query-parser": "^0.1.1",
-    "@liveblocks/vitest-config": "*",
+    "@types/json-schema": "^7.0.15",
     "@types/ws": "^8.5.10",
-    "eslint-plugin-rulesdir": "^0.2.2",
-    "fast-check": "^4.3.0",
+    "eslint": "^9.39.4",
+    "fast-check": "^4.6.0",
     "msw": "^2.10.4",
-    "ws": "^8.17.1"
+    "typescript": "^5.9.3",
+    "vitest": "^4.1.4",
+    "ws": "^8.17.1",
+    "@liveblocks/eslint-config": "0.0.0",
+    "@liveblocks/vitest-config": "1.0.0"
   },
@@ -70,3 +58,18 @@ "peerDependencies": {
   },
-  "sideEffects": false
-}
+  "sideEffects": false,
+  "scripts": {
+    "dev": "tsup --watch",
+    "build": "tsup && node dist/index.js",
+    "format": "(eslint --fix src/ e2e/ || true) && prettier --write src/ e2e/",
+    "lint": "eslint src/",
+    "lint:package": "publint --strict && attw --pack",
+    "test": "pnpm dlx liveblocks dev -p 1160 -c 'vitest run --coverage'",
+    "test:ci": "vitest run",
+    "test:types": "vitest run --config ./vitest.config.typecheck.ts",
+    "test:watch": "vitest",
+    "test:e2e": "pnpm dlx liveblocks dev -p 1160 -c 'vitest run --config=./vitest.config.e2e.ts'",
+    "test:deps": "depcruise src --exclude __tests__",
+    "showdeps": "depcruise src --include-only '^src' --exclude='__tests__' --output-type dot | dot -T svg > /tmp/dependency-graph.svg && open /tmp/dependency-graph.svg",
+    "showdeps:high-level": "depcruise src --include-only '^src' --exclude='(^src/index.ts|shallow.ts|__tests__)' --collapse='^src/(refs|lib|compat|types|crdts|protocol)' --output-type dot | dot -T svg > /tmp/dependency-graph.svg && open /tmp/dependency-graph.svg"
+  }
+}

New alerts

Network access

Supply chain risk

This module accesses the network.

Found 1 instance in 1 package

Copyleft License

License

Copyleft license information was found.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 1 instance in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

Mixed license

License

Package contains multiple licenses.

Found 1 instance in 1 package

No v1

Quality

Package is not semver >=1. This means it is not stable and does not support ^ ranges.

Found 1 instance in 1 package

Non-permissive License

License

A license not known to be considered permissive was found.

Found 1 instance in 1 package

Fixed alerts

Network access

Supply chain risk

This module accesses the network.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 1 instance in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

3018361

0.01%

Number of package files

9

12.5%

Worsened metrics

Dev dependency count

11

37.5%

Number of low license alerts

3

Infinity%

License quality

70

-30%

Number of low quality alerts

2

100%

No dependency changes