@vue/cli-shared-utils - npm Package Compare versions

Comparing version 3.0.0-alpha.4 to 3.0.0-alpha.5

index.js

@@ -1,4 +0,10 @@
-Object.assign(exports, require('./env'))
-Object.assign(exports, require('./logger'))
-Object.assign(exports, require('./validate'))
-Object.assign(exports, require('./linkBin'))
+[
+  'env',
+  'linkBin',
+  'logger',
+  'spinner',
+  'validate',
+  'openBrowser'
+].forEach(m => {
+  Object.assign(exports, require(`./lib/${m}`))
+})

package.json

 {
   "name": "@vue/cli-shared-utils",
-  "version": "3.0.0-alpha.4",
+  "version": "3.0.0-alpha.5",
   "description": "shared utilities for vue-cli packages",
@@ -24,5 +24,6 @@ "main": "index.js",
     "cmd-shim": "^2.0.2",
+    "execa": "^0.9.0",
     "joi": "^12.0.0",
+    "opn": "^5.2.0",
     "ora": "^1.3.0",
-    "readline": "^1.3.0",
     "string.prototype.padstart": "^3.0.0"
@@ -29,0 +30,0 @@ },

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Major refactor

Supply chain risk

Package has recently undergone a major refactor. It may be unstable or indicate significant internal changes. Use caution when updating to versions that include significant changes.

Found 1 instance in 1 package

Dynamic require

Supply chain risk

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

10930

increased by125.13%

Number of package files

11

increased by37.5%

Lines of code

282

increased by83.12%

Worsened metrics

Dependency count

7

increased by16.67%

Number of low supply chain risk alerts

10

increased by42.86%

Number of medium supply chain risk alerts

3

increased by200%

Dependency changes

• + Addedexeca@^0.9.0

• + Addedopn@^5.2.0

• + Addedcross-spawn@5.1.0(transitive)

• + Addedexeca@0.9.0(transitive)

• + Addedget-stream@3.0.0(transitive)

• + Addedis-stream@1.1.0(transitive)

• + Addedis-wsl@1.1.0(transitive)

• + Addedisexe@2.0.0(transitive)

• + Addedlru-cache@4.1.5(transitive)

• + Addednpm-run-path@2.0.2(transitive)

• + Addedopn@5.5.0(transitive)

• + Addedp-finally@1.0.0(transitive)

• + Addedpath-key@2.0.1(transitive)

• + Addedpseudomap@1.0.2(transitive)

• + Addedshebang-command@1.2.0(transitive)

• + Addedshebang-regex@1.0.0(transitive)

• + Addedstrip-eof@1.0.0(transitive)

• + Addedwhich@1.3.1(transitive)

• + Addedyallist@2.1.2(transitive)

• - Removedreadline@^1.3.0

• - Removedreadline@1.3.0(transitive)