awesome-wechat-sdk - npm Package Compare versions

Comparing version 2.1.1 to 2.2.0

package.json

 {
   "name": "awesome-wechat-sdk",
-  "version": "2.1.1",
+  "version": "2.2.0",
   "description": "an awesome sdk for wechat oauth, api and message middleware",
   "scripts": {
+    "prebuild": "rimraf lib",
     "build": "tsc",
-    "prepublishOnly": "npm run build"
+    "prepublishOnly": "npm run build",
+    "pretest": "npm run build",
+    "test": "mocha"
   },
@@ -19,2 +22,4 @@ "main": "lib/wechat.js",
     "debug": "^3.1.0",
+    "lodash": "^4.17.10",
+    "lodash-decorators": "^5.0.0",
     "urllib": "^2.25.4",
@@ -25,4 +30,8 @@ "xml2js": "^0.4.19"
     "@types/node": "^9.3.0",
+    "chai": "^4.1.2",
+    "commander": "^2.15.1",
+    "mocha": "^5.1.1",
+    "rimraf": "^2.6.2",
     "typescript": "^2.8.3"
   }
 }

tsconfig.json

@@ -5,2 +5,3 @@ {
     "target": "ES2017",
+    "experimentalDecorators": true,
     "moduleResolution": "Node",
@@ -7,0 +8,0 @@ "declaration": true,

New alerts

Major refactor

Supply chain risk

Package has recently undergone a major refactor. It may be unstable or indicate significant internal changes. Use caution when updating to versions that include significant changes.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 2 instances in 1 package

Improved metrics

Total package byte prevSize

122567

increased by23.78%

Number of package files

52

increased by92.59%

Lines of code

2102

increased by25.12%

Worsened metrics

Dependency count

5

increased by66.67%

Dev dependency count

6

increased by200%

Number of low supply chain risk alerts

4

increased by300%

Number of medium supply chain risk alerts

1

increased byInfinity%

Dependency changes

• + Addedlodash@^4.17.10

• + Addedlodash-decorators@^5.0.0

• + Addedlodash@4.17.21(transitive)

• + Addedlodash-decorators@5.0.1(transitive)

• + Addedtslib@1.14.1(transitive)