@steemit/steem-js - npm Package Compare versions

Comparing version 0.6.6 to 0.6.7

lib/api/transports/http.js

@@ -11,10 +11,6 @@ 'use strict';
 
-var _fetchPonyfill2 = require('fetch-ponyfill');
+var _crossFetch = require('cross-fetch');
 
-var _fetchPonyfill3 = _interopRequireDefault(_fetchPonyfill2);
+var _crossFetch2 = _interopRequireDefault(_crossFetch);
 
-var _bluebird = require('bluebird');
-
-var _bluebird2 = _interopRequireDefault(_bluebird);
-
 var _debug = require('debug');
@@ -36,5 +32,2 @@
 
-var _fetchPonyfill = (0, _fetchPonyfill3.default)(_bluebird2.default),
-    fetch = _fetchPonyfill.fetch;
-
 var debug = (0, _debug2.default)('steem:http');
@@ -65,3 +58,3 @@
   var payload = { id: id, jsonrpc: '2.0', method: method, params: params };
-  return fetch(uri, {
+  return (0, _crossFetch2.default)(uri, {
     body: JSON.stringify(payload),
@@ -68,0 +61,0 @@ method: 'post',

package.json

 {
   "name": "@steemit/steem-js",
-  "version": "0.6.6",
+  "version": "0.6.7",
   "description": "Steem.js the JavaScript API for Steem blockchain",
@@ -45,6 +45,6 @@ "main": "lib/index.js",
     "cross-env": "^5.0.0",
+    "cross-fetch": "^1.1.1",
     "debug": "^2.6.8",
     "detect-node": "^2.0.3",
     "ecurve": "^1.0.5",
-    "fetch-ponyfill": "^4.1.0",
     "lodash": "^4.16.4",
@@ -51,0 +51,0 @@ "postinstall-build": "^5.0.1",

New alerts

New author

Supply chain risk

A new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 2 instances in 1 package

Fixed alerts

Network access

Supply chain risk

This module accesses the network.

Found 1 instance in 1 package

Improved metrics

Number of package files

80

21.21%

Lines of code

10386

9.31%

Worsened metrics

Total package byte prevSize

14992407

-1.05%

Number of low supply chain risk alerts

10

66.67%

Dependency changes

• + Added

  cross-fetch@^1.1.1

• + Added

  cross-fetch@1.1.1
  (transitive)

• + Added

  whatwg-fetch@2.0.3
  (transitive)

• - Removed

  fetch-ponyfill@^4.1.0

• - Removed

  fetch-ponyfill@4.1.0
  (transitive)