@salesforce/core - npm Package Compare versions

Comparing version 1.0.1 to 1.0.2

package.json

 {
   "name": "@salesforce/core",
-  "version": "1.0.1",
+  "version": "1.0.2",
   "description": "Core libraries to interact with SFDX projects, orgs, and APIs.",
@@ -49,3 +49,3 @@ "main": "lib/exported",
     "mkdirp": "0.5.1",
-    "sfdx-faye": "^1.0.8"
+    "sfdx-faye": "^1.0.9"
   },
@@ -52,0 +52,0 @@ "devDependencies": {

README.md

@@ -42,3 +42,3 @@ [![NPM](https://img.shields.io/npm/v/@salesforce/core.svg)](https://www.npmjs.com/package/@salesforce/core)
     });
-    const auth: AuthInfo = await AuthInfo.create(testData.username);
+    const auth: AuthInfo = await AuthInfo.create({ username: testData.username });
     strictEqual(auth.getUsername(), testData.username);
@@ -76,3 +76,5 @@ });
     };
-    const connection: Connection = await Connection.create(await AuthInfo.create(testData.username));
+    const connection: Connection = await Connection.create({
+      authInfo: await AuthInfo.create({ username: testData.username })
+    });
     const result: QueryResult<{}> = await connection.query('select Id From Account');
@@ -79,0 +81,0 @@ deepStrictEqual(result, records);

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Major refactor

Supply chain risk

Package has recently undergone a major refactor. It may be unstable or indicate significant internal changes. Use caution when updating to versions that include significant changes.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Native code

Supply chain risk

Contains native code (e.g., compiled binaries or shared libraries). Including native code can obscure malicious behavior.

Found 2 instances in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 1 instance in 1 package

Improved metrics

Number of lines in readme file

166

increased by1.22%

Number of low supply chain risk alerts

16

decreased by-5.88%

Number of medium supply chain risk alerts

7

decreased by-12.5%

Worsened metrics

Total package byte prevSize

3632097

decreased by-40.08%

Number of package files

183

decreased by-50.27%

Lines of code

11842

decreased by-73.84%

Dependency changes

• Updatedsfdx-faye@^1.0.9