@segment/analytics.js-core - npm Package Compare versions

Comparing version 3.13.4-beta.0 to 3.13.4-beta.1

HISTORY.md

@@ -0,1 +1,5 @@
+# 3.13.4 / 2020-06-02
+
+- refactor: enable typescript support
+
 # 3.13.3 / 2020-05-26
@@ -2,0 +6,0 @@

karma.conf.js

@@ -8,2 +8,7 @@ /* eslint-env node */
 module.exports = function(config) {
+  require('ts-node').register({
+    compilerOptions: {
+      module: 'commonjs'
+    }
+  });
   config.set({
@@ -10,0 +15,0 @@ files: [

package.json

 {
   "name": "@segment/analytics.js-core",
   "author": "Segment <[e-mail]>",
-  "version": "3.13.4-beta.0",
+  "version": "3.13.4-beta.1",
   "description": "The hassle-free way to integrate analytics into any web application.",
@@ -105,2 +105,3 @@ "keywords": [
     "snyk": "^1.83.0",
+    "ts-node": "^8.10.2",
     "typescript": "^3.9.3",
@@ -107,0 +108,0 @@ "watchify": "^3.7.0"

tsconfig.json

@@ -7,4 +7,3 @@ {
   },
-  "include": ["lib", "test"],
-  "exclude": ["node_modules"]
+  "exclude": ["node_modules", "*.md", "Makefile", "karma.*", "test"]
 }

New alerts

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 1 instance in 1 package

Fixed alerts

New author

Supply chain risk

A new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.

Found 1 instance in 1 package

Improved metrics

Number of medium supply chain risk alerts

0

decreased by-100%

Worsened metrics

Total package byte prevSize

331513

decreased by-32.47%

Dev dependency count

42

increased by2.44%

Number of package files

68

decreased by-18.07%

Lines of code

8495

decreased by-31.51%

Number of low supply chain risk alerts

5

increased by25%

No dependency changes