@rnx-kit/third-party-notices
Advanced tools
@rnx-kit/third-party-notices - npm Package Compare versions
Comparing version 1.0.1 to 1.0.2
@@ -5,6 +5,141 @@ { | ||
| { | ||
| "date": "Sat, 05 Jun 2021 08:39:06 GMT", | ||
| "date": "Fri, 16 Jul 2021 21:45:30 GMT", | ||
| "tag": "@rnx-kit/third-party-notices_v1.0.2", | ||
| "version": "1.0.2", | ||
| "comments": { | ||
| "patch": [ | ||
| { | ||
| "comment": "Address CVE-2020-7608", | ||
| "author": "4123478+tido64@users.noreply.github.com", | ||
| "commit": "eb831d4e7e3b540e6e380a678dd0238304ce7e38", | ||
| "package": "@rnx-kit/third-party-notices" | ||
| } | ||
| ] | ||
| } | ||
| }, | ||
| { | ||
| "date": "Mon, 12 Jul 2021 09:53:10 GMT", | ||
| "tag": "@rnx-kit/third-party-notices_v1.0.1", | ||
| "version": "1.0.1", | ||
| "comments": { | ||
| "none": [ | ||
| { | ||
| "comment": "Added `lint` script", | ||
| "author": "4123478+tido64@users.noreply.github.com", | ||
| "commit": "d5c36bb21e3482c24ff8b029cb60802d04e6bb64", | ||
| "package": "@rnx-kit/third-party-notices" | ||
| } | ||
| ] | ||
| } | ||
| }, | ||
| { | ||
| "date": "Mon, 12 Jul 2021 07:51:46 GMT", | ||
| "tag": "@rnx-kit/third-party-notices_v1.0.1", | ||
| "version": "1.0.1", | ||
| "comments": { | ||
| "none": [ | ||
| { | ||
| "comment": "fix TPN tests", | ||
| "author": "afoxman@microsoft.com", | ||
| "commit": "021cfdb3fe726b76a377b2a6cccbe16a6999bf7a", | ||
| "package": "@rnx-kit/third-party-notices" | ||
| } | ||
| ] | ||
| } | ||
| }, | ||
| { | ||
| "date": "Sat, 10 Jul 2021 07:28:45 GMT", | ||
| "tag": "@rnx-kit/third-party-notices_v1.0.1", | ||
| "version": "1.0.1", | ||
| "comments": { | ||
| "none": [ | ||
| { | ||
| "comment": "Added `format` script", | ||
| "author": "4123478+tido64@users.noreply.github.com", | ||
| "commit": "eaedb2cae443a479e131cfd71fab5c1039daca9d", | ||
| "package": "@rnx-kit/third-party-notices" | ||
| } | ||
| ] | ||
| } | ||
| }, | ||
| { | ||
| "date": "Sat, 10 Jul 2021 07:28:25 GMT", | ||
| "tag": "@rnx-kit/third-party-notices_v1.0.1", | ||
| "version": "1.0.1", | ||
| "comments": { | ||
| "none": [ | ||
| { | ||
| "comment": "Added `format` script", | ||
| "author": "4123478+tido64@users.noreply.github.com", | ||
| "commit": "12196abcec79794493615829c3783d35f5bfc364", | ||
| "package": "@rnx-kit/third-party-notices" | ||
| } | ||
| ] | ||
| } | ||
| }, | ||
| { | ||
| "date": "Fri, 09 Jul 2021 12:23:47 GMT", | ||
| "tag": "@rnx-kit/third-party-notices_v1.0.1", | ||
| "version": "1.0.1", | ||
| "comments": { | ||
| "none": [ | ||
| { | ||
| "comment": "Add badges for build status and version", | ||
| "author": "4123478+tido64@users.noreply.github.com", | ||
| "commit": "2dc9fe456410eed10abbfa464ae7aa7e5cef7aef", | ||
| "package": "@rnx-kit/third-party-notices" | ||
| } | ||
| ] | ||
| } | ||
| }, | ||
| { | ||
| "date": "Fri, 09 Jul 2021 12:23:07 GMT", | ||
| "tag": "@rnx-kit/third-party-notices_v1.0.1", | ||
| "version": "1.0.1", | ||
| "comments": { | ||
| "none": [ | ||
| { | ||
| "comment": "Add badges for build status and version", | ||
| "author": "4123478+tido64@users.noreply.github.com", | ||
| "commit": "f3ff6e5f5c20cf9e8c81ca25a4fae3f483925c59", | ||
| "package": "@rnx-kit/third-party-notices" | ||
| } | ||
| ] | ||
| } | ||
| }, | ||
| { | ||
| "date": "Wed, 23 Jun 2021 09:28:25 GMT", | ||
| "tag": "@rnx-kit/third-party-notices_v1.0.1", | ||
| "version": "1.0.1", | ||
| "comments": { | ||
| "none": [ | ||
| { | ||
| "comment": "Added ESLint config", | ||
| "author": "4123478+tido64@users.noreply.github.com", | ||
| "commit": "4701f7a40c050f8d376fbcfc84ce6e50f5fcf501", | ||
| "package": "@rnx-kit/third-party-notices" | ||
| } | ||
| ] | ||
| } | ||
| }, | ||
| { | ||
| "date": "Tue, 22 Jun 2021 15:04:23 GMT", | ||
| "tag": "@rnx-kit/third-party-notices_v1.0.1", | ||
| "version": "1.0.1", | ||
| "comments": { | ||
| "none": [ | ||
| { | ||
| "comment": "Looser dependency on chalk and yargs", | ||
| "author": "4123478+tido64@users.noreply.github.com", | ||
| "commit": "fe36a9a52319cfac244fbbeb8c47a210af067366", | ||
| "package": "@rnx-kit/third-party-notices" | ||
| } | ||
| ] | ||
| } | ||
| }, | ||
| { | ||
| "date": "Sat, 05 Jun 2021 08:39:15 GMT", | ||
| "tag": "@rnx-kit/third-party-notices_v1.0.1", | ||
| "version": "1.0.1", | ||
| "comments": { | ||
| "patch": [ | ||
@@ -11,0 +146,0 @@ { |
| # Change Log - @rnx-kit/third-party-notices | ||
| This log was last generated on Sat, 05 Jun 2021 08:39:06 GMT and should not be manually modified. | ||
| This log was last generated on Fri, 16 Jul 2021 21:45:30 GMT and should not be manually modified. | ||
| <!-- Start content --> | ||
| ## 1.0.2 | ||
| Fri, 16 Jul 2021 21:45:30 GMT | ||
| ### Patches | ||
| - Address CVE-2020-7608 (4123478+tido64@users.noreply.github.com) | ||
| ## 1.0.1 | ||
| Sat, 05 Jun 2021 08:39:06 GMT | ||
| Sat, 05 Jun 2021 08:39:15 GMT | ||
@@ -11,0 +19,0 @@ ### Patches |
@@ -134,3 +134,3 @@ "use strict"; | ||
| return __awaiter(this, void 0, void 0, function* () { | ||
| const licenseExtractors = require("browserify-licenses/app/extractors"); | ||
| const licenseExtractors = require("./extractors"); | ||
| const moduleNamePathPairs = []; | ||
@@ -137,0 +137,0 @@ moduleNameToPathMap.forEach((modulePath, moduleName) => { |
| { | ||
| "name": "@rnx-kit/third-party-notices", | ||
| "version": "1.0.1", | ||
| "version": "1.0.2", | ||
| "description": "Library and tool to build a third party notices file based on a js bundle's source map", | ||
| "homepage": "https://github.com/microsoft/rnx-kit/tree/main/packages/third-party-notices#rnx-kitthird-party-notices", | ||
| "homepage": "https://github.com/microsoft/rnx-kit/tree/main/packages/third-party-notices#readme", | ||
| "license": "MIT", | ||
@@ -22,9 +22,10 @@ "files": [ | ||
| "build": "rnx-kit-scripts build", | ||
| "format": "prettier --write src/*.ts test/*.ts", | ||
| "format": "rnx-kit-scripts format", | ||
| "lint": "rnx-kit-scripts lint", | ||
| "test": "rnx-kit-scripts test" | ||
| }, | ||
| "dependencies": { | ||
| "browserify-licenses": "^1.4.7-1", | ||
| "chalk": "^4.1.1", | ||
| "yargs": "^16.2.0" | ||
| "chalk": "^4.1.0", | ||
| "spdx-expression-parse": "^3.0.1", | ||
| "yargs": "^16.0.0" | ||
| }, | ||
@@ -39,2 +40,5 @@ "devDependencies": { | ||
| }, | ||
| "eslintConfig": { | ||
| "extends": "@rnx-kit/eslint-config" | ||
| }, | ||
| "jest": { | ||
@@ -41,0 +45,0 @@ "roots": [ |
| # @rnx-kit/third-party-notices | ||
| [](https://github.com/microsoft/rnx-kit/actions/workflows/build.yml) | ||
| [](https://www.npmjs.com/package/@rnx-kit/third-party-notices) | ||
| `@rnx-kit/third-party-notices` provides a helper library to create a | ||
@@ -4,0 +7,0 @@ third-party-notices text file based on a output bundle. It also provides a cli |
Sorry, the diff of this file is not supported yet
New alerts
License Policy Violation
LicenseThis package is not allowed per your license policy. Review the package's license to ensure compliance.
Found 1 instance in 1 package
Dynamic require
Supply chain riskDynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.
Found 1 instance in 1 package
Fixed alerts
License Policy Violation
LicenseThis package is not allowed per your license policy. Review the package's license to ensure compliance.
Found 1 instance in 1 package
Improved metrics
- Total package byte prevSize
- increased by46.23%
47019
- Number of package files
- increased by23.53%
21
- Lines of code
- increased by64.32%
723
- Number of lines in readme file
- increased by5.45%
58
Worsened metrics
- Number of low supply chain risk alerts
- increased by100%
4
Dependency changes
+ Addedspdx-expression-parse@^3.0.1
- Removedbrowserify-licenses@^1.4.7-1
- RemovedJSONStream@1.3.5(transitive)
- Removedacorn@7.4.1(transitive)
- Removedacorn-node@1.8.2(transitive)
- Removedacorn-walk@7.2.0(transitive)
- Removedajv@8.17.1(transitive)
- Removedansi-styles@3.2.1(transitive)
- Removedasn1.js@4.10.1(transitive)
- Removedassert@1.5.1(transitive)
- Removedastral-regex@2.0.0(transitive)
- Removedavailable-typed-arrays@1.0.7(transitive)
- Removedbalanced-match@1.0.2(transitive)
- Removedbase64-js@1.5.1(transitive)
- Removedbn.js@4.12.15.2.1(transitive)
- Removedbrace-expansion@1.1.11(transitive)
- Removedbrorand@1.1.0(transitive)
- Removedbrowser-pack@6.1.0(transitive)
- Removedbrowser-resolve@2.0.0(transitive)
- Removedbrowserify@17.0.1(transitive)
- Removedbrowserify-aes@1.2.0(transitive)
- Removedbrowserify-cipher@1.0.1(transitive)
- Removedbrowserify-des@1.0.2(transitive)
- Removedbrowserify-licenses@1.5.1(transitive)
- Removedbrowserify-rsa@4.1.1(transitive)
- Removedbrowserify-sign@4.2.3(transitive)
- Removedbrowserify-zlib@0.2.0(transitive)
- Removedbuffer@5.2.1(transitive)
- Removedbuffer-from@1.1.2(transitive)
- Removedbuffer-xor@1.0.3(transitive)
- Removedbuiltin-status-codes@3.0.0(transitive)
- Removedcached-path-relative@1.1.0(transitive)
- Removedcall-bind@1.0.7(transitive)
- Removedchalk@2.4.2(transitive)
- Removedcipher-base@1.0.6(transitive)
- Removedcliui@8.0.1(transitive)
- Removedcolor-convert@1.9.3(transitive)
- Removedcolor-name@1.1.3(transitive)
- Removedcombine-source-map@0.8.0(transitive)
- Removedconcat-map@0.0.1(transitive)
- Removedconcat-stream@1.6.2(transitive)
- Removedconsole-browserify@1.2.0(transitive)
- Removedconstants-browserify@1.0.0(transitive)
- Removedconvert-source-map@1.1.3(transitive)
- Removedcore-util-is@1.0.3(transitive)
- Removedcreate-ecdh@4.0.4(transitive)
- Removedcreate-hash@1.2.0(transitive)
- Removedcreate-hmac@1.1.7(transitive)
- Removedcrypto-browserify@3.12.1(transitive)
- Removeddash-ast@1.0.0(transitive)
- Removeddefine-data-property@1.1.4(transitive)
- Removeddefine-properties@1.2.1(transitive)
- Removeddefined@1.0.1(transitive)
- Removeddeps-sort@2.0.1(transitive)
- Removeddes.js@1.1.0(transitive)
- Removeddetective@5.2.1(transitive)
- Removeddiffie-hellman@5.0.3(transitive)
- Removeddomain-browser@1.2.0(transitive)
- Removedduplexer2@0.1.4(transitive)
- Removedelliptic@6.6.1(transitive)
- Removedes-define-property@1.0.0(transitive)
- Removedes-errors@1.3.0(transitive)
- Removedescape-string-regexp@1.0.5(transitive)
- Removedevents@3.3.0(transitive)
- Removedevp_bytestokey@1.0.3(transitive)
- Removedfast-deep-equal@3.1.3(transitive)
- Removedfast-safe-stringify@2.1.1(transitive)
- Removedfast-uri@3.0.3(transitive)
- Removedfor-each@0.3.3(transitive)
- Removedfs.realpath@1.0.0(transitive)
- Removedfunction-bind@1.1.2(transitive)
- Removedget-assigned-identifiers@1.2.0(transitive)
- Removedget-intrinsic@1.2.4(transitive)
- Removedglob@7.2.3(transitive)
- Removedgopd@1.0.1(transitive)
- Removedhas-flag@3.0.0(transitive)
- Removedhas-property-descriptors@1.0.2(transitive)
- Removedhas-proto@1.0.3(transitive)
- Removedhas-symbols@1.0.3(transitive)
- Removedhas-tostringtag@1.0.2(transitive)
- Removedhash-base@3.0.5(transitive)
- Removedhash.js@1.1.7(transitive)
- Removedhasown@2.0.2(transitive)
- Removedhmac-drbg@1.0.1(transitive)
- Removedhtmlescape@1.1.1(transitive)
- Removedhttps-browserify@1.0.0(transitive)
- Removedieee754@1.2.1(transitive)
- Removedinflight@1.0.6(transitive)
- Removedinherits@2.0.32.0.4(transitive)
- Removedinline-source-map@0.6.3(transitive)
- Removedinsert-module-globals@7.2.1(transitive)
- Removedis-arguments@1.1.1(transitive)
- Removedis-buffer@1.1.6(transitive)
- Removedis-callable@1.2.7(transitive)
- Removedis-core-module@2.15.1(transitive)
- Removedis-generator-function@1.0.10(transitive)
- Removedis-typed-array@1.1.13(transitive)
- Removedisarray@1.0.0(transitive)
- Removedjson-schema-traverse@1.0.0(transitive)
- Removedjsonparse@1.3.1(transitive)
- Removedlabeled-stream-splicer@2.0.2(transitive)
- Removedlodash@4.17.21(transitive)
- Removedlodash.memoize@3.0.4(transitive)
- Removedlodash.truncate@4.4.2(transitive)
- Removedmd5.js@1.3.5(transitive)
- Removedmiller-rabin@4.0.1(transitive)
- Removedminimalistic-assert@1.0.1(transitive)
- Removedminimalistic-crypto-utils@1.0.1(transitive)
- Removedminimatch@3.1.2(transitive)
- Removedminimist@1.2.8(transitive)
- Removedmkdirp-classic@0.5.3(transitive)
- Removedmodule-deps@6.2.3(transitive)
- Removedobject-inspect@1.13.3(transitive)
- Removedobject-keys@1.1.1(transitive)
- Removedobject.assign@4.1.5(transitive)
- Removedonce@1.4.0(transitive)
- Removedos-browserify@0.3.0(transitive)
- Removedpako@1.0.11(transitive)
- Removedparents@1.0.1(transitive)
- Removedparse-asn1@5.1.7(transitive)
- Removedpath-browserify@1.0.1(transitive)
- Removedpath-is-absolute@1.0.1(transitive)
- Removedpath-parse@1.0.7(transitive)
- Removedpath-platform@0.11.15(transitive)
- Removedpbkdf2@3.1.2(transitive)
- Removedpossible-typed-array-names@1.0.0(transitive)
- Removedprocess@0.11.10(transitive)
- Removedprocess-nextick-args@2.0.1(transitive)
- Removedpublic-encrypt@4.0.3(transitive)
- Removedpunycode@1.4.1(transitive)
- Removedq@1.5.1(transitive)
- Removedqs@6.13.1(transitive)
- Removedquerystring-es3@0.2.1(transitive)
- Removedrandombytes@2.1.0(transitive)
- Removedrandomfill@1.0.4(transitive)
- Removedread-only-stream@2.0.0(transitive)
- Removedreadable-stream@2.3.83.6.2(transitive)
- Removedrequire-from-string@2.0.2(transitive)
- Removedresolve@1.22.8(transitive)
- Removedripemd160@2.0.2(transitive)
- Removedsafe-buffer@5.1.25.2.1(transitive)
- Removedset-function-length@1.2.2(transitive)
- Removedsha.js@2.4.11(transitive)
- Removedshasum-object@1.0.0(transitive)
- Removedshell-quote@1.8.2(transitive)
- Removedside-channel@1.0.6(transitive)
- Removedsimple-concat@1.0.1(transitive)
- Removedslice-ansi@4.0.0(transitive)
- Removedsource-map@0.5.7(transitive)
- Removedstream-browserify@3.0.0(transitive)
- Removedstream-combiner2@1.1.1(transitive)
- Removedstream-http@3.2.0(transitive)
- Removedstream-splicer@2.0.1(transitive)
- Removedstring_decoder@1.1.11.3.0(transitive)
- Removedsubarg@1.0.0(transitive)
- Removedsupports-color@5.5.0(transitive)
- Removedsupports-preserve-symlinks-flag@1.0.0(transitive)
- Removedsyntax-error@1.4.0(transitive)
- Removedtable@6.8.2(transitive)
- Removedthrough@2.3.8(transitive)
- Removedthrough2@2.0.53.0.2(transitive)
- Removedtimers-browserify@1.4.2(transitive)
- Removedtty-browserify@0.0.1(transitive)
- Removedtypedarray@0.0.6(transitive)
- Removedumd@3.0.3(transitive)
- Removedundeclared-identifiers@1.1.3(transitive)
- Removedurl@0.11.4(transitive)
- Removedutil@0.10.40.12.5(transitive)
- Removedutil-deprecate@1.0.2(transitive)
- Removedvm-browserify@1.1.2(transitive)
- Removedwhich-typed-array@1.1.16(transitive)
- Removedwrappy@1.0.2(transitive)
- Removedxtend@4.0.2(transitive)
- Removedyargs@17.7.2(transitive)
- Removedyargs-parser@21.1.1(transitive)
Updatedchalk@^4.1.0
Updatedyargs@^16.0.0