appcelerator-saml - npm Package Compare versions

Comparing version 0.6.0 to 0.6.1

package.json

 {
     "name": "appcelerator-saml",
-    "version": "0.6.0",
+    "version": "0.6.1",
     "description": "Appcelerator Arrow authentication using SAML strategy",
@@ -8,4 +8,11 @@ "main": "index.js",
         "type": "git",
-        "url": "https://github.com/marinvvasilev/appcelerator-saml"
+        "url": "https://github.com/appcelerator/appcelerator-saml"
     },
+    "files": [
+        "lib",
+        "conf",
+        "README.md",
+        "LICENSE",
+        "index.js"
+    ],
     "keywords": [
@@ -21,7 +28,2 @@ "appcelerator",
     "dependencies": {
-        "async": "^1.5.0",
-        "lodash": "^3.10.1",
-        "pkginfo": "^0.3.1",
-        "semver": "^5.0.3",
-        "cookies": "^0.5.1",
         "passport": "^0.3.2",
@@ -31,5 +33,7 @@ "passport-saml": "^0.31.0"
     "devDependencies": {
-        "arrow": "^*",
+        "arrow": "^3.0.0",
+        "async": "^1.5.0",
         "grunt": "^0.4.5",
         "grunt-appc-js": "^1.0.19",
+        "grunt-cli": "^0.1.13",
         "grunt-contrib-clean": "^0.7.0",
@@ -40,10 +44,10 @@ "grunt-contrib-jshint": "^1.1.0",
         "mocha": "^2.3.4",
-        "promise": "^7.1.1",
         "request": "^2.60.0",
-        "should": "^8.0.2",
-        "typescript": "^1.7.3"
+        "typescript": "^1.7.3",
+        "should": "^8.0.2"
     },
     "scripts": {
-        "test": "grunt"
+        "build:dist": "tsc",
+        "build": "tsc && grunt"
     }
 }

New alerts

Major refactor

Supply chain risk

Package has recently undergone a major refactor. It may be unstable or indicate significant internal changes. Use caution when updating to versions that include significant changes.

Found 1 instance in 1 package

New author

Supply chain risk

A new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.

Found 1 instance in 1 package

Fixed alerts

Dynamic require

Supply chain risk

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

Found 1 instance in 1 package

Improved metrics

Dependency count

2

decreased by-71.43%

Number of low supply chain risk alerts

2

decreased by-75%

Worsened metrics

Total package byte prevSize

13014

decreased by-73.67%

Dev dependency count

13

increased by8.33%

Number of package files

6

decreased by-81.82%

Lines of code

47

decreased by-92.67%

Number of medium supply chain risk alerts

2

increased byInfinity%

Dependency changes

• - Removedasync@^1.5.0

• - Removedcookies@^0.5.1

• - Removedlodash@^3.10.1

• - Removedpkginfo@^0.3.1

• - Removedsemver@^5.0.3

• - Removedasync@1.5.2(transitive)

• - Removedcookies@0.5.1(transitive)

• - Removedkeygrip@1.0.3(transitive)

• - Removedlodash@3.10.1(transitive)

• - Removedpkginfo@0.3.1(transitive)

• - Removedsemver@5.7.2(transitive)