@zerva/bin - npm Package Compare versions

Comparing version 0.10.13 to 0.11.0

package.json

 {
   "name": "@zerva/bin",
-  "version": "0.10.13",
+  "version": "0.11.0",
   "description": "🌱 Zerva Command Line Tool",
@@ -29,4 +29,5 @@ "keywords": [
   "dependencies": {
-    "@types/node": "^18.0.6",
-    "esbuild": "^0.14.49",
+    "@types/node": "^18.6.1",
+    "esbuild": "^0.14.50",
+    "esbuild-plugin-yaml": "^0.0.1",
     "node-notifier": "^10.0.1",
@@ -41,5 +42,5 @@ "zeed": "^0.7.168"
     "test": "echo todo",
-    "dr": "pnpm run build && node bin.cjs -d --loader=.md:text",
-    "db": "pnpm run build && node bin.cjs --build -d --loader=.md:text && node --enable-source-maps dist/main.cjs"
+    "dr": "pnpm run build && node bin.cjs demo/zerva.js -d --loader=.md:text",
+    "db": "pnpm run build && node bin.cjs demo/zerva.js --build -d --loader=.md:text && node --enable-source-maps dist/main.cjs"
   }
 }

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Dynamic require

Supply chain risk

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 3 instances in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Dynamic require

Supply chain risk

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

584842

increased by15.12%

Lines of code

576

increased by121.54%

Worsened metrics

Dependency count

5

increased by25%

Number of low supply chain risk alerts

32

increased by28%

Dependency changes

• + Addedesbuild-plugin-yaml@^0.0.1

• + Addedargparse@2.0.1(transitive)

• + Addedat-least-node@1.0.0(transitive)

• + Addedesbuild-plugin-yaml@0.0.1(transitive)

• + Addedfs-extra@9.1.0(transitive)

• + Addedgraceful-fs@4.2.11(transitive)

• + Addedjs-yaml@4.1.0(transitive)

• + Addedjsonfile@6.1.0(transitive)

• + Addeduniversalify@2.0.1(transitive)

• Updated@types/node@^18.6.1

• Updatedesbuild@^0.14.50