aemfed - npm Package Compare versions

Comparing version 0.0.6 to 0.0.7

CHANGELOG.md

 # aemfed changelog
 
+## 0.0.7
+
+- Use tarballs to reference customized dependencies to speed up `npm install` and fix an issue when npm is trying to use ssh to get the reference
+- Updated dependencies
+
 ## 0.0.6
@@ -4,0 +9,0 @@

package.json

 {
   "name": "aemfed",
-  "version": "0.0.6",
+  "version": "0.0.7",
   "description": "Upload front-end changes into AEM, refresh relevant resources in the page and get instant notifications from the error.log, all for easier and faster development.",
@@ -18,8 +18,8 @@ "author": {
   "dependencies": {
-    "aemsync": "github:abmaonline/aemsync#a2bed54",
-    "browser-sync": "^2.26.0",
+    "aemsync": "https://github.com/abmaonline/aemsync/tarball/a2bed54",
+    "browser-sync": "^2.26.3",
     "chalk": "^2.4.1",
     "decode-html": "^2.0.0",
     "graceful-fs": "^4.1.9",
-    "less-tree": "github:abmaonline/less-tree#6168498",
+    "less-tree": "https://github.com/abmaonline/less-tree/tarball/e37873a",
     "minimist": "^1.2.0",
@@ -38,3 +38,3 @@ "opn": "^5.4.0",
     "@types/minimist": "^1.2.0",
-    "@types/node": "^9.6.34",
+    "@types/node": "6.14.0",
     "@types/opn": "^5.1.0",
@@ -45,3 +45,3 @@ "@types/recursive-readdir": "^2.2.0",
     "@types/vinyl": "^2.0.2",
-    "husky": "^1.1.1",
+    "husky": "^1.1.2",
     "precise-commits": "^1.0.2",
@@ -51,3 +51,3 @@ "prettier": "1.14.3",
     "tslint-config-prettier": "1.15.0",
-    "typescript": "^3.1.1"
+    "typescript": "^3.1.3"
   },
@@ -54,0 +54,0 @@ "scripts": {

README.md

@@ -157,3 +157,3 @@ # aemfed
 
-- Works best with a recent version of node/npm, but tested with node 6.x
+- Works best with a recent version of node/npm, but tested with node 6.14 LTS
 - Tested on AEM 6.1, 6.2, 6.3 and 6.4
@@ -160,0 +160,0 @@ - To be able to see the error messages from AEM, at least version 1.0.0 of the Sling Log Tracer is needed. AEM 6.2 and before have an older version or don't have the bundle at all. Versions of Log Tracer since 1.0.2 can also be installed on those older versions of AEM (6.0+ according to the [ticket](https://issues.apache.org/jira/browse/SLING-5762)). See [Updating Sling Log Tracer](#updating-sling-log-tracer) for instructions.

New alerts

HTTP dependency

Supply chain risk

Contains a dependency which resolves to a remote HTTP URL which could be used to inject untrusted code and reduce overall package reliability.

Found 2 instances in 1 package

Fixed alerts

GitHub dependency

Supply chain risk

Contains a dependency which resolves to a GitHub URL. Dependencies fetched from GitHub specifiers are not immutable can be used to inject untrusted code or reduce the likelihood of a reproducible install.

Found 2 instances in 1 package

Improved metrics

Total package byte prevSize

140970

increased by0.16%

Number of high supply chain risk alerts

0

decreased by-100%

Worsened metrics

Number of critical supply chain risk alerts

2

increased byInfinity%

Dependency changes

• Updatedaemsync@https://github.com/abmaonline/aemsync/tarball/a2bed54

• Updatedbrowser-sync@^2.26.3

• Updatedless-tree@https://github.com/abmaonline/less-tree/tarball/e37873a