appium-uiautomator2-server - npm Package Compare versions

Comparing version 0.4.1 to 1.0.1

package.json

 {
   "name": "appium-uiautomator2-server",
-  "version": "0.4.1",
+  "version": "1.0.1",
   "description": "A netty server with uiautomator2 handlers",
   "main": "index.js",
-  "windowsBuildDir":"c:/tmp",
-   "repository": {
+  "windowsBuildDir": "c:/tmp",
+  "repository": {
     "type": "git",
@@ -21,3 +21,15 @@ "url": "https://github.com/appium/appium-uiautomator2-server"
   },
-  "homepage": "https://github.com/appium/appium-uiautomator2-server"
+  "homepage": "https://github.com/appium/appium-uiautomator2-server",
+  "scripts": {
+    "bump-gradle-version": "node update-gradle-version.js --package-version=${npm_package_version} && git add app/build.gradle",
+    "build": "gradle clean assembleServerDebug assembleServerDebugAndroidTest",
+    "move-server": "cp app/build/outputs/apk/server/debug/appium-uiautomator2-server-v${npm_package_version}.apk ./apks",
+    "move-test": "cp app/build/outputs/apk/androidTest/server/debug/appium-uiautomator2-server-debug-androidTest.apk ./apks",
+    "move-apks": "rm -rf apks && mkdir -p apks && npm run move-server && npm run move-test",
+    "version": "npm run bump-gradle-version && npm run build && npm run move-apks"
+  },
+  "devDependencies": {
+    "replace-in-file": "^3.1.0",
+    "yargs": "^10.1.1"
+  }
 }

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Debug access

Supply chain risk

Uses debug, reflection and dynamic code execution features.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Empty package

Supply chain risk

Package does not contain any code. It may be removed, is name squatting, or the result of a faulty package publish.

Found 1 instance in 1 package

Native code

Supply chain risk

Contains native code (e.g., compiled binaries or shared libraries). Including native code can obscure malicious behavior.

Found 1 instance in 1 package

No v1

Quality

Package is not semver >=1. This means it is not stable and does not support ^ ranges.

Found 1 instance in 1 package

Improved metrics

Lines of code

36

increased byInfinity%

Number of low quality alerts

0

decreased by-100%

Number of medium supply chain risk alerts

34

decreased by-5.56%

Worsened metrics

Total package byte prevSize

11835302

decreased by-2.08%

Dev dependency count

2

increased byInfinity%

Number of package files

69

decreased by-67.3%

Number of low supply chain risk alerts

1

increased byInfinity%

No dependency changes