@stoplight/spectral-cli - npm Package Compare versions

Comparing version 0.0.0 to 1.0.0

package.json

 {
   "name": "@stoplight/spectral-cli",
-  "version": "0.0.0",
+  "version": "1.0.0",
   "homepage": "https://github.com/stoplightio/spectral",
@@ -8,3 +8,3 @@ "bugs": "https://github.com/stoplightio/spectral/issues",
   "bin": {
-    "spectral": "./dist/cli/index.js"
+    "spectral": "./dist/index.js"
   },
@@ -27,29 +27,39 @@ "engines": {
   },
+  "scripts": {
+    "build.binary": "pkg . --output ./binaries/spectral",
+    "build.windows": "pkg . --targets windows --out-path ./binaries",
+    "build.nix": "pkg . --targets linux,macos,alpine --out-path ./binaries",
+    "postbuild": "copyfiles -u 1 \"./src/formatters/html/*.html\" \"./dist/\"",
+    "cli": "node -r ts-node/register/transpile-only -r tsconfig-paths/register src/index.ts",
+    "cli:debug": "node -r ts-node/register/transpile-only -r tsconfig-paths/register --inspect-brk src/index.ts"
+  },
   "dependencies": {
-    "@stoplight/better-ajv-errors": "0.1.1",
     "@stoplight/json": "3.15.0",
-    "@stoplight/json-ref-readers": "1.2.2",
-    "@stoplight/json-ref-resolver": "3.1.2",
-    "@stoplight/lifecycle": "2.3.2",
     "@stoplight/path": "1.3.2",
+    "@stoplight/spectral-core": "^0.0.0",
+    "@stoplight/spectral-parsers": "^0.0.0",
+    "@stoplight/spectral-ref-resolver": "^0.0.0",
+    "@stoplight/spectral-ruleset-migrator": "^0.0.0",
+    "@stoplight/spectral-runtime": "^0.0.0",
     "@stoplight/types": "12.3.0",
-    "abort-controller": "3.0.0",
-    "chalk": "4.1.0",
+    "chalk": "4.1.1",
+    "cliui": "7.0.4",
     "eol": "0.9.1",
-    "expression-eval": "4.0.0",
     "fast-glob": "3.2.5",
-    "json-schema-migrate": "2.0.0",
-    "json-schema-traverse": "1.0.0",
-    "jsonpath-plus": "5.0.7",
-    "lodash": "4.17.21",
-    "node-fetch": "2.6.1",
+    "lodash": "~4.17.21",
     "proxy-agent": "4.0.1",
     "strip-ansi": "6.0",
     "text-table": "0.2",
-    "tslib": "2.2.0",
+    "tslib": "~2.3.0",
     "yargs": "17.0.1"
   },
-  "scripts": {
-    "cli": "node -r ts-node/register/transpile-only -r tsconfig-paths/register src/index.ts",
-    "cli:debug": "node -r ts-node/register/transpile-only -r tsconfig-paths/register --inspect-brk src/index.ts"
+  "devDependencies": {
+    "@types/xml2js": "^0.4.8",
+    "@types/yargs": "^17.0.0",
+    "copyfiles": "^2.4.1",
+    "jest-when": "^3.3.1",
+    "nock": "^12.0.2",
+    "node-html-parser": "^3.3.5",
+    "pkg": "^5.2.1",
+    "xml2js": "^0.4.23"
   },
@@ -62,6 +72,5 @@ "pkg": {
       "./dist/**/*.json",
-      "./dist/cli/**/*.html"
+      "./dist/**/*.html"
     ]
-  },
-  "gitHead": "0904e7b8ed3099c284443375acc605795dfa2d8a"
+  }
 }

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Major refactor

Supply chain risk

Package has recently undergone a major refactor. It may be unstable or indicate significant internal changes. Use caution when updating to versions that include significant changes.

Found 1 instance in 1 package

New author

Supply chain risk

A new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.

Found 1 instance in 1 package

Dynamic require

Supply chain risk

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 1 instance in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Empty package

Supply chain risk

Package does not contain any code. It may be removed, is name squatting, or the result of a faulty package publish.

Found 1 instance in 1 package

No v1

Quality

Package is not semver >=1. This means it is not stable and does not support ^ ranges.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

76821

increased by516%

Dependency count

18

decreased by-18.18%

Number of package files

94

increased by4600%

Lines of code

1000

increased byInfinity%

Number of low quality alerts

0

decreased by-100%

Worsened metrics

Dev dependency count

8

increased byInfinity%

Number of low supply chain risk alerts

12

increased byInfinity%

Number of medium supply chain risk alerts

2

increased by100%

Dependency changes

• + Added@stoplight/spectral-core@^0.0.0

• + Added@stoplight/spectral-parsers@^0.0.0

• + Added@stoplight/spectral-ref-resolver@^0.0.0

• + Added@stoplight/spectral-ruleset-migrator@^0.0.0

• + Added@stoplight/spectral-runtime@^0.0.0

• + Addedcliui@7.0.4

• + Added@stoplight/better-ajv-errors@0.0.4(transitive)

• + Added@stoplight/json-ref-resolver@3.1.1(transitive)

• + Added@stoplight/spectral-core@0.0.0(transitive)

• + Added@stoplight/spectral-parsers@0.0.0(transitive)

• + Added@stoplight/spectral-ref-resolver@0.0.0(transitive)

• + Added@stoplight/types@11.9.0(transitive)

• + Added@stoplight/yaml@4.2.1(transitive)

• + Added@stoplight/yaml-ast-parser@0.0.48(transitive)

• + Addedagent-base@4.2.14.3.0(transitive)

• + Addedajv@6.12.5(transitive)

• + Addedajv-oai@1.2.0(transitive)

• + Addedast-types@0.16.1(transitive)

• + Addedastring@1.9.0(transitive)

• + Addedblueimp-md5@2.18.0(transitive)

• + Addedchalk@4.1.1(transitive)

• + Addedco@4.6.0(transitive)

• + Addeddata-uri-to-buffer@1.2.0(transitive)

• + Addeddebug@2.6.93.1.03.2.7(transitive)

• + Addeddecimal.js@10.4.3(transitive)

• + Addeddegenerator@1.0.4(transitive)

• + Addedes6-promise@4.2.8(transitive)

• + Addedes6-promisify@5.0.0(transitive)

• + Addedesprima@3.1.3(transitive)

• + Addedextend@3.0.2(transitive)

• + Addedfast-json-stable-stringify@2.1.0(transitive)

• + Addedfile-uri-to-path@1.0.0(transitive)

• + Addedget-uri@2.0.4(transitive)

• + Addedhttp-proxy-agent@2.1.0(transitive)

• + Addedhttps-proxy-agent@3.0.1(transitive)

• + Addedip@1.1.5(transitive)

• + Addedisarray@1.0.0(transitive)

• + Addedjson-schema-traverse@0.4.1(transitive)

• + Addedjsonpath-plus@5.0.3(transitive)

• + Addedlodash@4.17.20(transitive)

• + Addedms@2.0.0(transitive)

• + Addednanoid@2.1.11(transitive)

• + Addednetmask@1.0.6(transitive)

• + Addednimma@0.0.0(transitive)

• + Addedpac-proxy-agent@3.0.1(transitive)

• + Addedpac-resolver@3.0.0(transitive)

• + Addedprocess-nextick-args@2.0.1(transitive)

• + Addedproxy-agent@3.1.1(transitive)

• + Addedpunycode@2.3.1(transitive)

• + Addedreadable-stream@2.3.8(transitive)

• + Addedsafe-buffer@5.1.2(transitive)

• + Addedsocks@2.3.3(transitive)

• + Addedsocks-proxy-agent@4.0.2(transitive)

• + Addedstring_decoder@1.1.1(transitive)

• + Addedthunkify@2.1.2(transitive)

• + Addedtslib@2.1.02.3.1(transitive)

• + Addeduri-js@4.4.1(transitive)

• + Addedutil-deprecate@1.0.2(transitive)

• - Removed@stoplight/better-ajv-errors@0.1.1

• - Removed@stoplight/json-ref-readers@1.2.2

• - Removed@stoplight/json-ref-resolver@3.1.2

• - Removed@stoplight/lifecycle@2.3.2

• - Removedabort-controller@3.0.0

• - Removedexpression-eval@4.0.0

• - Removedjson-schema-migrate@2.0.0

• - Removedjson-schema-traverse@1.0.0

• - Removedjsonpath-plus@5.0.7

• - Removednode-fetch@2.6.1

• - Removed@stoplight/better-ajv-errors@0.1.1(transitive)

• - Removedajv@8.17.1(transitive)

• - Removedchalk@4.1.0(transitive)

• - Removedfast-uri@3.0.3(transitive)

• - Removedjson-schema-migrate@2.0.0(transitive)

• - Removedjson-schema-traverse@1.0.0(transitive)

• - Removedjsonpath-plus@5.0.7(transitive)

• - Removedrequire-from-string@2.0.2(transitive)

• - Removedtslib@2.2.0(transitive)

• Updatedchalk@4.1.1

• Updatedlodash@~4.17.21

• Updatedtslib@~2.3.0