bee-checkbox - npm Package Compare versions

Comparing version 2.0.10 to 2.0.11

CHANGELOG.md

@@ -0,1 +1,10 @@
+## [2.0.11](https://github.com/tinper-bee/checkbox/compare/v2.0.10...v2.0.11) (2020-04-24)
+
+
+### Bug Fixes
+
+* 自动化 ([117305d](https://github.com/tinper-bee/checkbox/commit/117305d600c15c760801363f0f299e1ca3ecb4f3))
+
+
+
 <a name="2.0.10"></a>
@@ -2,0 +11,0 @@ ## [2.0.10](https://github.com/tinper-bee/checkbox/compare/v2.0.8...v2.0.10) (2020-03-06)

package.json

 {
- "name": "bee-checkbox",
- "version": "2.0.10",
- "description": "checkbox ui component for react",
- "keywords": [
-  "react",
-  "react-component",
-  "react-checkbox",
-  "iuap-design",
-  "neoui-react",
-  "checkbox"
- ],
- "engines": {
-  "node": ">=4.0.0"
- },
- "homepage": "https://github.com/tinper-bee/checkbox",
- "author": "",
- "repository": "http://github.com/tinper-bee/checkbox",
- "bugs": "https://github.com/tinper-bee/checkbox/issues",
- "license": "MIT",
- "main": "./build/index",
- "config": {
-  "port": 8000,
-  "commitizen": {
-   "path": "./node_modules/cz-conventional-changelog"
+  "name": "bee-checkbox",
+  "version": "2.0.11",
+  "description": "checkbox ui component for react",
+  "keywords": [
+    "react",
+    "react-component",
+    "react-checkbox",
+    "iuap-design",
+    "neoui-react",
+    "checkbox"
+  ],
+  "engines": {
+    "node": ">=4.0.0"
+  },
+  "homepage": "https://github.com/tinper-bee/checkbox",
+  "author": "",
+  "repository": "http://github.com/tinper-bee/checkbox",
+  "bugs": "https://github.com/tinper-bee/checkbox/issues",
+  "license": "MIT",
+  "main": "./build/index",
+  "config": {
+    "port": 8000,
+    "commitizen": {
+      "path": "./node_modules/cz-conventional-changelog"
+    }
+  },
+  "scripts": {
+    "dev": "bee-tools run start",
+    "build": "bee-tools run build",
+    "lint": "bee-tools run lint",
+    "test": "bee-tools run test",
+    "chrome": "bee-tools run chrome",
+    "browsers": "bee-tools run browsers",
+    "pub": "bee-tools run pub",
+    "coveralls": "bee-tools run coverage",
+    "version": "conventional-changelog -p angular -i CHANGELOG.md -s && git add CHANGELOG.md",
+    "postversion": "git push --follow-tags",
+    "prepublishOnly": "npm run build"
+  },
+  "dependencies": {
+    "classnames": "^2.2.5",
+    "lodash.isequal": "^4.5.0",
+    "tinper-bee-core": "latest"
+  },
+  "peerDependencies": {
+    "react": "^15.3.0 || ^16.0",
+    "react-dom": "^15.3.0 || ^16.0",
+    "prop-types": "15.6.0"
+  },
+  "devDependencies": {
+    "bee-button": "latest",
+    "bee-clipboard": "^2.0.0",
+    "bee-drawer": "0.0.2",
+    "bee-form": "^2.0.6",
+    "bee-layout": "latest",
+    "bee-panel": "latest",
+    "chai": "^3.5.0",
+    "console-polyfill": "~0.2.1",
+    "cz-conventional-changelog": "^2.1.0",
+    "enzyme": "^2.4.1",
+    "es5-shim": "~4.1.10",
+    "react": "~15.3.0 ",
+    "react-addons-test-utils": "15.3.2",
+    "react-dom": "~15.3.0",
+    "husky": "^4.2.5"
   }
- },
- "scripts": {
-  "dev": "bee-tools run start",
-  "build": "bee-tools run build",
-  "lint": "bee-tools run lint",
-  "test": "bee-tools run test",
-  "chrome": "bee-tools run chrome",
-  "browsers": "bee-tools run browsers",
-  "pub": "bee-tools run pub",
-  "coveralls": "bee-tools run coverage"
- },
- "dependencies": {
-  "classnames": "^2.2.5",
-  "lodash.isequal": "^4.5.0",
-  "tinper-bee-core": "latest"
- },
- "peerDependencies": {
-  "react": "^15.3.0 || ^16.0",
-  "react-dom": "^15.3.0 || ^16.0",
-  "prop-types": "15.6.0"
- },
- "devDependencies": {
-  "bee-button": "latest",
-  "bee-clipboard": "^2.0.0",
-  "bee-drawer": "0.0.2",
-  "bee-form": "^2.0.6",
-  "bee-layout": "latest",
-  "bee-panel": "latest",
-  "chai": "^3.5.0",
-  "console-polyfill": "~0.2.1",
-  "cz-conventional-changelog": "^2.1.0",
-  "enzyme": "^2.4.1",
-  "es5-shim": "~4.1.10",
-  "react": "~15.3.0 ",
-  "react-addons-test-utils": "15.3.2",
-  "react-dom": "~15.3.0"
- }
-}
+}

New alerts

Major refactor

Supply chain risk

Package has recently undergone a major refactor. It may be unstable or indicate significant internal changes. Use caution when updating to versions that include significant changes.

Found 1 instance in 1 package

New author

Supply chain risk

A new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.

Found 1 instance in 1 package

Fixed alerts

Uses eval

Supply chain risk

Package uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 2 instances in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

Improved metrics

Number of low supply chain risk alerts

1

decreased by-98.18%

Number of medium supply chain risk alerts

2

decreased by-33.33%

Worsened metrics

Total package byte prevSize

44532

decreased by-97.82%

Dev dependency count

15

increased by7.14%

Number of package files

17

decreased by-52.78%

Lines of code

714

decreased by-97%

No dependency changes