amplitude - npm Package Compare versions

Comparing version 5.1.2 to 5.1.3

CHANGELOG.md

 # Amplitude Change Log
 
+## v5.1.3
+
+- Update `axios` and `node-fetch`
+
 ## v5.1.2
+
 - Add LICENSE file
@@ -9,3 +14,5 @@ - Update devDependencies
 ## v5.1.1
+
 As of 2020-05-30, Amplitude reported issues with their SSL certificate, so they set up an endpoint and alternate endpoint at `https://api2.amplitude.com`. Read about it on [Amplitude's Status Page](https://status.amplitude.com/incidents/lf2pwqnyrn6s) and affected devices [here](https://calnetweb.berkeley.edu/calnet-technologists/incommon-sectigo-certificate-service/addtrust-external-root-expiration-may-2020).
+
 - Add option to set token endpoint via an environment variable, i.e. `AMPLITUDE_TOKEN_ENDPOINT="https://api2.amplitude.com"`
@@ -15,8 +22,10 @@ - Add option to set token endpoint via constructor options, i.e. `https://api2.amplitude.com`
 ## v5.0.2
+
 - Convert to typescript (this shouldn't break anything as it's being exported just like before)
 - Implement the [Amplitude HTTP V2 API](https://developers.amplitude.com/docs/http-api-v2)
 
-**IMPORTANT**: There aren't any breaking changes in the code, but the Amplitude V2 API has a few stricter validations server side. For example, in one project where I was using this, I was passing a timestamp generated from Swift, so it was a float. However, the [time](https://developers.amplitude.com/docs/http-api-v2#parameters) param only allows type of `long`, i.e. `integer`. 
+**IMPORTANT**: There aren't any breaking changes in the code, but the Amplitude V2 API has a few stricter validations server side. For example, in one project where I was using this, I was passing a timestamp generated from Swift, so it was a float. However, the [time](https://developers.amplitude.com/docs/http-api-v2#parameters) param only allows type of `long`, i.e. `integer`.
 
 From Amplitude's docs:
+
 > - Validation on Content-type header (must be set to application/json)
@@ -30,8 +39,11 @@ > - Validation on proper JSON request body
 ## v4.0.3
+
 - Update README
 
 ## v4.0.1
+
 - Changes maintainer
 
 ## Previous Releases
+
 See the releases from the original repo: [crookedneighbor/amplitude](https://github.com/crookedneighbor/amplitude/releases)

package.json

 {
   "name": "amplitude",
-  "version": "5.1.2",
+  "version": "5.1.3",
   "description": "A node wrapper for Amplitude analytics http api",
@@ -64,3 +64,3 @@ "author": "Blade Barringer <[e-mail]>",
   "dependencies": {
-    "axios": "^0.19.2"
+    "axios": "^0.20.0"
   },
@@ -74,8 +74,7 @@ "devDependencies": {
     "@types/sinon-chai": "^3.2.4",
-    "@typescript-eslint/eslint-plugin": "^3.5.0",
-    "@typescript-eslint/parser": "^3.5.0",
+    "@typescript-eslint/eslint-plugin": "^3.7.0",
+    "@typescript-eslint/parser": "^3.7.0",
     "chai": "^4.2.0",
-    "codecov": "^3.7.0",
-    "ecmascript-version-detector": "^1.0.3",
-    "eslint": "^7.3.1",
+    "codecov": "^3.7.1",
+    "eslint": "^6.8.0",
     "eslint-config-prettier": "^6.11.0",
@@ -86,4 +85,5 @@ "eslint-plugin-prettier": "^3.1.4",
     "lint-staged": "^10.2.11",
-    "mocha": "^8.0.1",
-    "nock": "^13.0.2",
+    "lodash": "^4.17.19",
+    "mocha": "^7.2.0",
+    "nock": "^12.0.3",
     "nyc": "^15.1.0",
@@ -94,3 +94,3 @@ "prettier": "1.19.1",
     "ts-node": "^8.10.2",
-    "typescript": "^3.9.6"
+    "typescript": "^3.9.7"
   },
@@ -97,0 +97,0 @@ "license": "ISC",

README.md

 # amplitude
 
-![Build Status](https://travis-ci.org/geoffdutton/amplitude.svg?branch=master) ![npm version](https://badge.fury.io/js/amplitude.svg) [![Greenkeeper badge](https://badges.greenkeeper.io/geoffdutton/amplitude.svg)](https://greenkeeper.io/)
+![Build Status](https://travis-ci.org/geoffdutton/amplitude.svg?branch=master) ![npm version](https://badge.fury.io/js/amplitude.svg) [![Known Vulnerabilities](https://snyk.io/test/github/geoffdutton/amplitude/badge.svg?targetFile=package.json)](https://snyk.io/test/github/geoffdutton/amplitude?targetFile=package.json)
 
@@ -5,0 +5,0 @@ Server side implementation of [Amplitude](https://amplitude.com)'s HTTP API.

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

New author

Supply chain risk

A new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

45119

increased by0.26%

Worsened metrics

Number of medium supply chain risk alerts

1

increased byInfinity%

Dependency changes

• + Addedaxios@0.20.0(transitive)

• + Addedfollow-redirects@1.15.9(transitive)

• - Removedaxios@0.19.2(transitive)

• - Removedfollow-redirects@1.5.10(transitive)

• Updatedaxios@^0.20.0