@mashroom/mashroom-helmet - npm Package Compare versions

Comparing version 1.9.3 to 2.0.0-alpha.0

package.json

@@ -7,3 +7,3 @@ {
     "license": "MIT",
-    "version": "1.9.3",
+    "version": "2.0.0-alpha.0",
     "files": [
@@ -13,10 +13,6 @@ "dist/**"
     "dependencies": {
-        "helmet": "^4.6.0"
+        "helmet": "^5.0.1"
     },
     "devDependencies": {
-        "@babel/cli": "^7.15.7",
-        "@mashroom/mashroom": "1.9.3",
-        "eslint": "^7.32.0",
-        "express": "^4.17.1",
-        "typescript": "^4.4.3"
+        "@mashroom/mashroom": "2.0.0-alpha.0"
     },
@@ -39,21 +35,26 @@ "scripts": {
                         "contentSecurityPolicy": false,
-                        "dnsPrefetchControl ": {
-                            "allow": false
+                        "crossOriginEmbedderPolicy": false,
+                        "crossOriginOpenerPolicy": {
+                            "policy": "same-origin-allow-popups"
                         },
+                        "crossOriginResourcePolicy": {
+                            "policy": "same-site"
+                        },
                         "expectCt": false,
-                        "featurePolicy": false,
-                        "frameguard": {
-                            "action": "sameorigin"
-                        },
-                        "hidePoweredBy": false,
+                        "referrerPolicy": false,
                         "hsts": {
                             "maxAge": 31536000
                         },
+                        "noSniff": true,
+                        "originAgentCluster": false,
+                        "dnsPrefetchControl": {
+                            "allow": false
+                        },
                         "ieNoOpen": false,
-                        "noSniff": {},
+                        "frameguard": {
+                            "action": "sameorigin"
+                        },
                         "permittedCrossDomainPolicies": false,
-                        "referrerPolicy": false,
-                        "xssFilter": {
-                            "mode": null
-                        }
+                        "hidePoweredBy": false,
+                        "xssFilter": true
                     }
@@ -60,0 +61,0 @@ }

README.md

 
 # Mashroom Helmet
 
-Plugin for [Mashroom Server](https://www.mashroom-server.com), a **Integration Platform for Microfrontends**.
+Plugin for [Mashroom Server](https://www.mashroom-server.com), a **Microfrontend Integration Platform**.
 
-This plugin adds the [Helmet](https://helmetjs.github.io/) middleware which sets a bunch of protective HTTP headers
-on each response.
+This plugin adds the [Helmet](https://helmetjs.github.io/) middleware which sets a bunch of protective HTTP headers on each response.
 
@@ -47,3 +46,6 @@ ## Usage
 * _helmet_: The configuration will directly be passed to _Helmet_ middelware. Checkout the [Helmet Documentation](https://helmetjs.github.io/docs/)
-for available options. You should enable the _noCache_ module because this would significantly decrease the performance
-of the _Mashroom Portal_.
+for available options.
+
+<span class="panel-info">
+**NOTE**: You shouldn't enable the _noCache_ module because this would significantly decrease the performance of the _Mashroom Portal_.
+</span>

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

No v1

Quality

Package is not semver >=1. This means it is not stable and does not support ^ ranges.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

5336

increased by4.18%

Dev dependency count

1

decreased by-80%

Number of lines in readme file

51

increased by4.08%

Worsened metrics

Number of low quality alerts

1

increased byInfinity%

Dependency changes

• + Addedhelmet@5.1.1(transitive)

• - Removedhelmet@4.6.0(transitive)

• Updatedhelmet@^5.0.1