clockify - npm Package Compare versions

Comparing version 0.1.1 to 0.2.0

package.json

 {
   "name": "clockify",
-  "version": "0.1.1",
+  "version": "0.2.0",
   "description": "A time tracker to make sure that you really spent the time you think you spent working, studying, etc.",
-  "main": "./dist/index.js",
-  "module": "./dist/index.mjs",
-  "types": "./dis/index.d.ts",
   "license": "MIT",
   "keywords": [
-    "time tracking",
+    "time tracker",
     "habits tracker"
@@ -17,2 +14,5 @@ ],
   },
+  "bin": {
+    "clockify": "./bin/index.js"
+  },
   "dependencies": {
@@ -25,5 +25,5 @@ "sqlite3": "^5.1.4"
     "better-sqlite3": "^9.4.1",
-    "nodemon": "^2.0.20",
+    "nodemon": "^3.0.3",
     "prettier": "^3.2.5",
-    "tsup": "^8.0.2",
+    "ts-node": "^10.9.2",
     "typescript": "^5.3.3",
@@ -33,8 +33,8 @@ "vitest": "^1.3.0"
   "scripts": {
-    "dev": "nodemon ./src/server.js",
+    "dev": "nodemon ./src/index.ts ./src/server.ts",
     "format": "prettier . --write",
     "testOnce": "vitest --run",
     "formatCheck": "prettier . --check",
-    "lint": "tsc",
-    "build": "tsc --build",
+    "lint": "tsc --noEmit",
+    "build": "tsc",
     "ci": "npm run formatCheck && npm run lint && npm run testOnce && npm run build",
@@ -41,0 +41,0 @@ "release": "npm run ci && npx changeset && npx changeset publish"

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Major refactor

Supply chain risk

Package has recently undergone a major refactor. It may be unstable or indicate significant internal changes. Use caution when updating to versions that include significant changes.

Found 1 instance in 1 package

Network access

Supply chain risk

This module accesses the network.

Found 1 instance in 1 package

Shell access

Supply chain risk

This module accesses the system shell. Accessing the system shell increases the risk of executing arbitrary code.

Found 1 instance in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Empty package

Supply chain risk

Package does not contain any code. It may be removed, is name squatting, or the result of a faulty package publish.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

36329

increased by1009.62%

Number of package files

11

increased by120%

Lines of code

852

increased byInfinity%

Worsened metrics

Number of low supply chain risk alerts

3

increased by200%

Number of medium supply chain risk alerts

5

increased by400%

No dependency changes