@storybook/docs-mdx - npm Package Compare versions

Comparing version 3.1.0 to 3.1.1--canary.5592450.0

dist/index.d.ts

@@ -1,6 +0,6 @@
-import * as t from '@babel/types';
+import { Program } from 'hast-util-to-estree/lib';
 
-declare const extractImports: (root: t.File) => Record<string, string>;
+declare const extractImports: (root: Program) => Record<string, string>;
 declare const plugin: (store: any) => (root: any) => any;
-declare const analyze: (code: string) => {
+declare const analyze: (code: string) => Promise<{
     title: any;
@@ -12,4 +12,4 @@ of: any;
     imports: any;
-};
+}>;
 
 export { analyze, extractImports, plugin };

package.json

 {
   "name": "@storybook/docs-mdx",
-  "version": "3.1.0",
+  "version": "3.1.1--canary.5592450.0",
   "description": "Storybook Docs MDX analyzer",
@@ -25,3 +25,2 @@ "repository": {
     "prettier": "prettier",
-    "prebuild": "rm -rf dist",
     "release": "yarn build && auto shipit",
@@ -36,20 +35,15 @@ "start": "concurrently \"yarn build:watch\" \"yarn storybook -- --no-manager-cache --quiet\"",
   },
+  "dependencies": {
+    "acorn": "^8.12.1"
+  },
   "devDependencies": {
-    "@babel/core": "^7.23.6",
-    "@babel/parser": "^7.23.6",
-    "@babel/preset-env": "^7.23.6",
-    "@babel/preset-typescript": "^7.23.3",
-    "@babel/traverse": "^7.23.6",
-    "@babel/types": "^7.23.6",
     "@mdx-js/mdx": "^3.0.0",
-    "@types/babel__traverse": "^7.20.4",
-    "@types/lodash": "^4.14.202",
     "@types/node": "^18.0.0",
     "auto": "^11.1.2",
     "concurrently": "^8.2.2",
-    "estree-to-babel": "^9.0.0",
+    "estree-jsx": "^0.0.1",
     "hast-util-to-estree": "^3.1.0",
     "husky": ">=6",
     "lint-staged": ">=10",
-    "lodash": "^4.17.21",
+    "meriyah": "^4.5.0",
     "prettier": "^3.1.1",
@@ -56,0 +50,0 @@ "ts-dedent": "^2.2.0",

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Major refactor

Supply chain risk

Package has recently undergone a major refactor. It may be unstable or indicate significant internal changes. Use caution when updating to versions that include significant changes.

Found 1 instance in 1 package

Uses eval

Supply chain risk

Package uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Found 1 instance in 1 package

Dynamic require

Supply chain risk

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

Found 1 instance in 1 package

No v1

Quality

Package is not semver >=1. This means it is not stable and does not support ^ ranges.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Improved metrics

Dev dependency count

14

decreased by-36.36%

Number of package files

8

increased by33.33%

Lines of code

18053

increased by797.27%

Worsened metrics

Total package byte prevSize

631714

decreased by-93.12%

Dependency count

1

increased byInfinity%

Number of low quality alerts

2

increased by100%

Number of low supply chain risk alerts

3

increased byInfinity%

Number of medium supply chain risk alerts

2

increased byInfinity%

Dependency changes

• + Addedacorn@^8.12.1

• + Addedacorn@8.14.0(transitive)