@transifex/native - npm Package Compare versions

Comparing version 3.2.2 to 4.0.0

package.json

 {
   "name": "@transifex/native",
-  "version": "3.2.2",
+  "version": "4.0.0",
   "description": "i18n framework using Transifex Native",
@@ -34,29 +34,28 @@ "keywords": [
   "engines": {
-    "node": ">=12.0.0"
+    "node": ">=14.0.0"
   },
   "devDependencies": {
-    "@babel/core": "^7.17.8",
-    "@babel/plugin-transform-runtime": "^7.14.5",
-    "@babel/preset-env": "^7.14.5",
-    "@babel/runtime": "^7.17.8",
+    "@babel/core": "^7.17.10",
+    "@babel/plugin-transform-runtime": "^7.17.10",
+    "@babel/preset-env": "^7.17.10",
+    "@babel/runtime": "^7.17.9",
     "babel-eslint": "^10.1.0",
-    "babel-loader": "^8.1.0",
+    "babel-loader": "^8.2.5",
     "chai": "^4.3.4",
     "eslint": "^7.28.0",
     "eslint-config-airbnb-base": "^14.2.0",
-    "eslint-loader": "^4.0.2",
-    "eslint-plugin-import": "^2.23.4",
-    "glob": "^7.1.7",
-    "mocha": "^9.1.3",
+    "eslint-plugin-import": "^2.26.0",
+    "glob": "^8.0.1",
+    "mocha": "^10.0.0",
     "nock": "^13.1.0",
     "nyc": "^15.1.0",
     "source-map-support": "^0.5.19",
-    "webpack": "^4.46.0",
-    "webpack-cli": "^3.3.12"
+    "webpack": "^5.72.0",
+    "webpack-cli": "^4.9.2"
   },
   "dependencies": {
     "@messageformat/core": "^3.0.0",
-    "axios": "^0.26.1",
+    "axios": "^0.27.2",
     "md5": "^2.3.0"
   }
 }

README.md

@@ -25,3 +25,3 @@ <p align="center">
 
-Supported Node.js versions >= `12.x.x`
+Supported Node.js versions >= `14.x.x`
 
@@ -28,0 +28,0 @@ Related packages:

webpack.browser.js

@@ -26,18 +26,2 @@ const path = require('path');
         test: /\.(js|jsx)$/,
-        enforce: 'pre',
-        use: [
-          {
-            options: {
-              cache: true,
-              configFile: '.eslintrc.json',
-              formatter: 'eslint-formatter-pretty',
-              emitWarning: true,
-              failOnError: true,
-            },
-            loader: 'eslint-loader',
-          },
-        ],
-      },
-      {
-        test: /\.(js|jsx)$/,
         exclude: /(node_modules)/,
@@ -44,0 +28,0 @@ use: {

webpack.node.js

@@ -23,21 +23,4 @@ const path = require('path');
   module: {
-    rules: [
-      {
-        test: /\.(js|jsx)$/,
-        enforce: 'pre',
-        use: [
-          {
-            options: {
-              cache: true,
-              configFile: '.eslintrc.json',
-              formatter: 'eslint-formatter-pretty',
-              emitWarning: true,
-              failOnError: true,
-            },
-            loader: 'eslint-loader',
-          },
-        ],
-      },
-    ],
+    rules: [],
   },
 };

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Uses eval

Supply chain risk

Package uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 3 instances in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

Unidentified License

License

(Experimental) Something that seems like a license was found, but its contents could not be matched with a known license.

Found 2 instances in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Uses eval

Supply chain risk

Package uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 3 instances in 1 package

Improved metrics

Total package byte prevSize

1571608

increased by14.14%

Dev dependency count

17

decreased by-5.56%

Number of package files

24

increased by9.09%

Lines of code

2715

increased by22.35%

Worsened metrics

Number of low license alerts

2

increased byInfinity%

License quality

80

decreased by-20%

Number of low supply chain risk alerts

16

increased by14.29%

Dependency changes

• + Addedasynckit@0.4.0(transitive)

• + Addedaxios@0.27.2(transitive)

• + Addedcombined-stream@1.0.8(transitive)

• + Addeddelayed-stream@1.0.0(transitive)

• + Addedform-data@4.0.1(transitive)

• + Addedmime-db@1.52.0(transitive)

• + Addedmime-types@2.1.35(transitive)

• - Removedaxios@0.26.1(transitive)

• Updatedaxios@^0.27.2