@strapi/generate-new - npm Package Compare versions

Comparing version 0.0.0-next.7408df892b5a12da19143747d41f1e9614a29688 to 0.0.0-next.7466630056657c483fb286557dda890490597807

package.json

 {
   "name": "@strapi/generate-new",
-  "version": "0.0.0-next.7408df892b5a12da19143747d41f1e9614a29688",
+  "version": "0.0.0-next.7466630056657c483fb286557dda890490597807",
   "description": "Generate a new Strapi application.",
@@ -31,9 +31,16 @@ "keywords": [
   ],
-  "main": "./lib/index.js",
-  "directories": {
-    "lib": "./lib"
-  },
+  "main": "./dist/index.js",
+  "module": "./dist/index.mjs",
+  "source": "./src/index.ts",
+  "types": "./dist/index.d.ts",
+  "files": [
+    "./dist"
+  ],
   "scripts": {
-    "test": "echo \"no tests yet\"",
-    "lint": "eslint ."
+    "build": "pack-up build && run copy-files",
+    "clean": "run -T rimraf ./dist",
+    "copy-files": "copyfiles -u 1 -a 'src/resources/files/**/*' 'src/resources/dot-files/**/*' 'src/resources/**/*.template' dist",
+    "lint": "run -T eslint .",
+    "test:ts": "run -T tsc --noEmit",
+    "watch": "pack-up watch"
   },
@@ -43,18 +50,21 @@ "dependencies": {
     "chalk": "^4.1.2",
-    "execa": "^1.0.0",
+    "execa": "5.1.1",
     "fs-extra": "10.0.0",
     "inquirer": "8.2.5",
     "lodash": "4.17.21",
-    "node-fetch": "^2.6.9",
+    "node-fetch": "2.7.0",
     "node-machine-id": "^1.1.10",
     "ora": "^5.4.1",
-    "semver": "7.3.8",
-    "tar": "6.1.13",
-    "uuid": "^8.3.2"
+    "semver": "7.5.4",
+    "tar": "6.1.13"
   },
+  "devDependencies": {
+    "@strapi/pack-up": "4.23.0",
+    "copyfiles": "2.4.1"
+  },
   "engines": {
-    "node": ">=14.19.1 <=18.x.x",
+    "node": ">=18.0.0 <=20.x.x",
     "npm": ">=6.0.0"
   },
-  "gitHead": "7408df892b5a12da19143747d41f1e9614a29688"
+  "gitHead": "7466630056657c483fb286557dda890490597807"
 }

New alerts

Major refactor

Supply chain risk

Package has recently undergone a major refactor. It may be unstable or indicate significant internal changes. Use caution when updating to versions that include significant changes.

Found 1 instance in 1 package

Dynamic require

Supply chain risk

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

Found 1 instance in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 2 instances in 1 package

Unidentified License

License

(Experimental) Something that seems like a license was found, but its contents could not be matched with a known license.

Found 1 instance in 1 package

Fixed alerts

Dynamic require

Supply chain risk

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

Found 1 instance in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 2 instances in 1 package

No tests

Quality

Package does not have any tests. This is a strong signal of a poorly maintained or low quality package.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

256631

increased by312.46%

Dependency count

11

decreased by-8.33%

Number of package files

213

increased by204.29%

Lines of code

2771

increased by102.41%

Number of low quality alerts

1

decreased by-50%

Worsened metrics

Dev dependency count

2

increased byInfinity%

Number of low license alerts

1

increased byInfinity%

License quality

80

decreased by-20%

Number of low supply chain risk alerts

24

increased by60%

Number of medium supply chain risk alerts

3

increased by200%

Dependency changes

• + Addedcross-spawn@7.0.6(transitive)

• + Addedexeca@5.1.1(transitive)

• + Addedget-stream@6.0.1(transitive)

• + Addedhuman-signals@2.1.0(transitive)

• + Addedis-stream@2.0.1(transitive)

• + Addedmerge-stream@2.0.0(transitive)

• + Addednpm-run-path@4.0.1(transitive)

• + Addedpath-key@3.1.1(transitive)

• + Addedsemver@7.5.4(transitive)

• + Addedshebang-command@2.0.0(transitive)

• + Addedshebang-regex@3.0.0(transitive)

• + Addedstrip-final-newline@2.0.0(transitive)

• + Addedwhich@2.0.2(transitive)

• - Removeduuid@^8.3.2

• - Removedcross-spawn@6.0.6(transitive)

• - Removedend-of-stream@1.4.4(transitive)

• - Removedexeca@1.0.0(transitive)

• - Removedget-stream@4.1.0(transitive)

• - Removedis-stream@1.1.0(transitive)

• - Removednice-try@1.0.5(transitive)

• - Removednpm-run-path@2.0.2(transitive)

• - Removedonce@1.4.0(transitive)

• - Removedp-finally@1.0.0(transitive)

• - Removedpath-key@2.0.1(transitive)

• - Removedpump@3.0.2(transitive)

• - Removedsemver@5.7.27.3.8(transitive)

• - Removedshebang-command@1.2.0(transitive)

• - Removedshebang-regex@1.0.0(transitive)

• - Removedstrip-eof@1.0.0(transitive)

• - Removeduuid@8.3.2(transitive)

• - Removedwhich@1.3.1(transitive)

• - Removedwrappy@1.0.2(transitive)

• Updatedexeca@5.1.1

• Updatednode-fetch@2.7.0

• Updatedsemver@7.5.4