@segment/analytics.js-core - npm Package Compare versions

Comparing version 3.11.0 to 3.11.1-dev.0

lib/cookie.js

@@ -12,3 +12,2 @@ 'use strict';
 var defaults = require('@ndhoule/defaults');
-var json = require('json3');
 var topDomain = require('@segment/top-domain');
@@ -77,3 +76,3 @@
   try {
-    value = json.stringify(value);
+    value = window.JSON.stringify(value);
     cookie(key, value, clone(this._options));
@@ -96,3 +95,3 @@ return true;
     var value = cookie(key);
-    value = value ? json.parse(value) : null;
+    value = value ? window.JSON.parse(value) : null;
     return value;
@@ -99,0 +98,0 @@ } catch (e) {

lib/normalize.js

@@ -13,4 +13,3 @@ 'use strict';
 var type = require('component-type');
-var uuid = require('uuid').v4;
-var json = require('json3');
+var uuid = require('uuid/v4');
 var md5 = require('spark-md5').hash;
@@ -83,3 +82,3 @@
   // generate and attach a messageId to msg
-  msg.messageId = 'ajs-' + md5(json.stringify(msg) + uuid());
+  msg.messageId = 'ajs-' + md5(window.JSON.stringify(msg) + uuid());
 
@@ -86,0 +85,0 @@ // cleanup

package.json

 {
   "name": "@segment/analytics.js-core",
   "author": "Segment <[e-mail]>",
-  "version": "3.11.0",
+  "version": "3.11.1-dev.0",
   "description": "The hassle-free way to integrate analytics into any web application.",
@@ -61,3 +61,2 @@ "keywords": [
     "is": "^3.1.0",
-    "json3": "^3.3.2",
     "new-date": "^1.0.0",
@@ -67,3 +66,3 @@ "next-tick": "^0.2.2",
     "spark-md5": "^2.0.2",
-    "uuid": "^2.0.2"
+    "uuid": "^3.4.0"
   },
@@ -70,0 +69,0 @@ "devDependencies": {

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

New author

Supply chain risk

A new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.

Found 1 instance in 1 package

No v1

Quality

Package is not semver >=1. This means it is not stable and does not support ^ ranges.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Deprecated

Maintenance

The maintainer of the package marked it as deprecated. This could indicate that a single version should not be used, or that the package is no longer maintained and any new vulnerabilities will not be fixed.

Found 1 instance in 1 package

New author

Supply chain risk

A new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

485167

increased by113.99%

Dependency count

34

decreased by-2.86%

Number of package files

40

increased by5.26%

Number of medium maintenance alerts

0

decreased by-100%

Worsened metrics

Lines of code

5603

decreased by-0.04%

Number of low quality alerts

1

increased byInfinity%

Dependency changes

• + Addeduuid@3.4.0(transitive)

• - Removedjson3@^3.3.2

• - Removeduuid@2.0.3(transitive)

• Updateduuid@^3.4.0