botframework-streaming - npm Package Compare versions

Comparing version 4.11.0-dev.20201023.26b5a40 to 4.11.0-dev.20201026.d91f7a1

package.json

@@ -5,3 +5,3 @@ {
   "description": "Streaming library for the Microsoft Bot Framework",
-  "version": "4.11.0-dev.20201023.26b5a40",
+  "version": "4.11.0-dev.20201026.d91f7a1",
   "license": "MIT",
@@ -24,3 +24,3 @@ "keywords": [
   "main": "lib/index.js",
-  "browser": "browser/index-browser.js",
+  "browser": "lib/index-browser.js",
   "typings": "lib/index.d.ts",
@@ -36,6 +36,11 @@ "dependencies": {
     "@types/node": "^10.17.27",
+    "browserify": "16.5.2",
     "chai": "^4.2.0",
+    "exorcist": "^1.0.1",
     "mocha": "^6.2.3",
+    "npm-run-all": "^4.1.5",
     "nyc": "^15.1.0",
+    "rimraf": "^3.0.2",
     "sinon": "^7.5.0",
+    "sponge": "^0.1.0",
     "ts-node": "^4.1.0",
@@ -45,6 +50,9 @@ "typescript": "3.5.3"
   "scripts": {
-    "build": "tsc -p tsconfig.json && tsc -p tsconfig-browser.json",
+    "build": "npm-run-all -p build:lib build:es5",
+    "build:lib": "tsc -p tsconfig.json",
+    "build:es5": "tsc -p tsconfig-es5.json",
+    "postbuild": "browserify -s BFSE --debug es5/index-browser.js | exorcist lib/index-browser.js.map | sponge lib/index-browser.js",
     "build:rollup": "npm run clean && npm run build && api-extractor run --verbose --local",
-    "clean": "rmdir /q /s lib browser",
-    "set-version": "npm version --allow-same-version 4.11.0-dev.20201023.26b5a40",
+    "clean": "rimraf q s lib es5",
+    "set-version": "npm version --allow-same-version 4.11.0-dev.20201026.d91f7a1",
     "test": "npm run build && nyc mocha tests/",
@@ -55,5 +63,4 @@ "test:compat": "api-extractor run --verbose"
     "lib",
-    "src",
-    "browser"
+    "src"
   ]
 }

New alerts

Dynamic require

Supply chain risk

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

1027680

increased by41.5%

Lines of code

15304

increased by17.69%

Number of medium supply chain risk alerts

3

decreased by-25%

Worsened metrics

Dev dependency count

14

increased by55.56%

Number of package files

348

decreased by-41.02%

Number of low supply chain risk alerts

6

increased byInfinity%

No dependency changes