@xylabs/threads - npm Package Compare versions

Comparing version 3.3.3 to 3.4.0

package.json

 {
   "name": "@xylabs/threads",
-  "version": "3.3.3",
+  "version": "3.4.0",
   "description": "Web workers & worker threads as simple as a function call",
@@ -70,10 +70,10 @@ "license": "MIT",
     "@babel/types": "^7.24.5",
-    "callsites": "^3.1.0",
+    "callsites": "^4.1.0",
     "debug": "^4.3.4",
-    "is-observable": "^2.1.0",
+    "is-observable": "^3.0.0",
     "observable-fns": "^0.6.1"
   },
   "devDependencies": {
-    "@rollup/plugin-commonjs": "^16.0.0",
-    "@rollup/plugin-node-resolve": "^10.0.0",
+    "@rollup/plugin-commonjs": "^25.0.8",
+    "@rollup/plugin-node-resolve": "^15.2.3",
     "@types/chai": "^4.3.16",
@@ -83,20 +83,20 @@ "@types/debug": "^4.1.12",
     "@types/node": "^20.12.12",
-    "@types/webpack": "^4.41.38",
-    "ava": "^3.15.0",
-    "chai": "^4.4.1",
+    "@types/webpack": "^5.28.5",
+    "ava": "^6.1.3",
+    "chai": "^5.1.1",
     "cross-env": "^7.0.3",
-    "execa": "^4.1.0",
-    "mocha": "^8.4.0",
+    "execa": "^9.1.0",
+    "mocha": "^10.4.0",
     "puppet-run": "^0.11.4",
-    "puppet-run-plugin-mocha": "^0.10.0-alpha",
+    "puppet-run-plugin-mocha": "^0.1.1",
     "raw-loader": "^4.0.2",
-    "rimraf": "^3.0.2",
-    "rollup": "^2.79.1",
+    "rimraf": "^5.0.7",
+    "rollup": "^4.18.0",
     "threads-plugin": "^1.4.0",
     "tiny-worker": "^2.3.0",
-    "ts-loader": "^8.4.0",
-    "ts-node": "^9.1.1",
+    "ts-loader": "^9.5.1",
+    "ts-node": "^10.9.2",
     "typescript": "^5.4.5",
     "wavy": "^1.0.4",
-    "webpack": "^4.47.0",
+    "webpack": "^5.91.0",
     "worker-plugin": "^5.0.1"
@@ -103,0 +103,0 @@ },

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

New author

Supply chain risk

A new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Worsened metrics

Total package byte prevSize

290802

Number of medium supply chain risk alerts

15

increased by7.14%

Dependency changes

• + Addedcallsites@4.2.0(transitive)

• + Addedis-observable@3.0.0(transitive)

• - Removedcallsites@3.1.0(transitive)

• - Removedis-observable@2.1.0(transitive)

• Updatedcallsites@^4.1.0

• Updatedis-observable@^3.0.0