codemirror - npm Package Compare versions

Comparing version 6.0.1 to 6.65.7

package.json

 {
   "name": "codemirror",
-  "version": "6.0.1",
-  "description": "Basic configuration for the CodeMirror code editor",
-  "scripts": {
-    "test": "cm-runtests",
-    "prepare": "cm-buildhelper src/codemirror.ts"
-  },
-  "keywords": [
-    "editor",
-    "code"
-  ],
+  "version": "6.65.7",
+  "main": "lib/codemirror.js",
+  "style": "lib/codemirror.css",
   "author": {
@@ -18,28 +11,43 @@ "name": "Marijn Haverbeke",
   },
-  "type": "module",
-  "main": "dist/index.cjs",
-  "exports": {
-    "import": "./dist/index.js",
-    "require": "./dist/index.cjs"
-  },
-  "types": "dist/index.d.ts",
-  "module": "dist/index.js",
-  "sideEffects": false,
+  "description": "Full-featured in-browser code editor",
   "license": "MIT",
-  "dependencies": {
-    "@codemirror/autocomplete": "^6.0.0",
-    "@codemirror/commands": "^6.0.0",
-    "@codemirror/language": "^6.0.0",
-    "@codemirror/lint": "^6.0.0",
-    "@codemirror/search": "^6.0.0",
-    "@codemirror/state": "^6.0.0",
-    "@codemirror/view": "^6.0.0"
+  "directories": {
+    "lib": "./lib"
   },
+  "scripts": {
+    "build": "rollup -c",
+    "watch": "rollup -w -c",
+    "prepare": "npm run-script build",
+    "test": "node ./test/run.js",
+    "lint": "bin/lint"
+  },
   "devDependencies": {
-    "@codemirror/buildhelper": "^0.1.5"
+    "@rollup/plugin-buble": "^0.21.3",
+    "blint": "^1.1.2",
+    "cm5-vim": "^0.0.5",
+    "node-static": "0.7.11",
+    "puppeteer": "^1.20.0",
+    "rollup": "^1.26.3",
+    "rollup-plugin-copy": "^3.4.0"
   },
+  "bugs": "http://github.com/codemirror/CodeMirror/issues",
+  "keywords": [
+    "JavaScript",
+    "CodeMirror",
+    "Editor"
+  ],
+  "homepage": "https://codemirror.net/5/",
   "repository": {
     "type": "git",
-    "url": "https://github.com/codemirror/basic-setup.git"
+    "url": "https://github.com/codemirror/CodeMirror.git"
+  },
+  "jspm": {
+    "directories": {},
+    "dependencies": {},
+    "devDependencies": {}
+  },
+  "dependencies": {},
+  "publishConfig": {
+    "tag": "version5"
   }
 }

README.md

@@ -1,20 +0,47 @@
-# codemirror [![NPM version](https://img.shields.io/npm/v/codemirror)](https://www.npmjs.org/package/codemirror)
+# CodeMirror
 
-[ [**WEBSITE**](https://codemirror.net/) | [**DOCS**](https://codemirror.net/docs/ref/#codemirror) | [**ISSUES**](https://github.com/codemirror/dev/issues) | [**FORUM**](https://discuss.codemirror.net/c/next/) | [**CHANGELOG**](https://github.com/codemirror/basic-setup/blob/main/CHANGELOG.md) ]
+[![Build Status](https://github.com/codemirror/codemirror5/workflows/main/badge.svg)](https://github.com/codemirror/codemirror5/actions)
+[![NPM version](https://img.shields.io/npm/v/codemirror.svg)](https://www.npmjs.org/package/codemirror)
 
-This package provides an example configuration for the
-[CodeMirror](https://codemirror.net/) code editor. The actual editor
-is implemented in the various packages under the `@codemirror` scope,
-which this package depends on.
+CodeMirror is a versatile text editor implemented in JavaScript for
+the browser. It is specialized for editing code, and comes with over
+100 language modes and various addons that implement more advanced
+editing functionality. Every language comes with fully-featured code
+and syntax highlighting to help with reading and editing complex code.
 
-The [project page](https://codemirror.net/) has more information, a
-number of [examples](https://codemirror.net/examples/) and the
-[documentation](https://codemirror.net/docs/).
+A rich programming API and a CSS theming system are available for
+customizing CodeMirror to fit your application, and extending it with
+new functionality.
 
-This code is released under an
-[MIT license](https://github.com/codemirror/basic-setup/tree/main/LICENSE).
+You can find more information (and the
+[manual](https://codemirror.net/5/doc/manual.html)) on the [project
+page](https://codemirror.net/5/). For questions and discussion, use the
+[discussion forum](https://discuss.codemirror.net/).
 
-We aim to be an inclusive, welcoming community. To make that explicit,
-we have a [code of
-conduct](http://contributor-covenant.org/version/1/1/0/) that applies
-to communication around the project.
+See
+[CONTRIBUTING.md](https://github.com/codemirror/CodeMirror/blob/master/CONTRIBUTING.md)
+for contributing guidelines.
+
+The CodeMirror community aims to be welcoming to everybody. We use the
+[Contributor Covenant
+(1.1)](http://contributor-covenant.org/version/1/1/0/) as our code of
+conduct.
+
+### Installation
+
+Either get the [zip file](https://codemirror.net/5/codemirror.zip) with
+the latest version, or make sure you have [Node](https://nodejs.org/)
+installed and run:
+
+    npm install codemirror
+
+**NOTE**: This is the source repository for the library, and not the
+distribution channel. Cloning it is not the recommended way to install
+the library, and will in fact not work unless you also run the build
+step.
+
+### Quickstart
+
+To build the project, make sure you have Node.js installed (at least version 6)
+and then `npm install`. To run, just open `index.html` in your
+browser (you don't need to run a webserver). Run the tests with `npm test`.

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Deprecated

Maintenance

The maintainer of the package marked it as deprecated. This could indicate that a single version should not be used, or that the package is no longer maintained and any new vulnerabilities will not be fixed.

Found 1 instance in 1 package

Major refactor

Supply chain risk

Package has recently undergone a major refactor. It may be unstable or indicate significant internal changes. Use caution when updating to versions that include significant changes.

Found 1 instance in 1 package

Uses eval

Supply chain risk

Package uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Found 1 instance in 1 package

Dynamic require

Supply chain risk

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

Found 1 instance in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

No bug tracker

Maintenance

Package does not have a linked bug tracker in package.json.

Found 1 instance in 1 package

No website

Quality

Package does not have a website.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

2954247

increased by16510.89%

Dependency count

0

decreased by-100%

Number of package files

338

increased by4125%

Lines of code

66382

increased by28512.93%

Number of low quality alerts

0

decreased by-100%

Number of lines in readme file

48

increased by128.57%

Worsened metrics

Dev dependency count

7

increased by600%

Number of medium maintenance alerts

1

increased byInfinity%

Number of low supply chain risk alerts

14

increased byInfinity%

Number of medium supply chain risk alerts

2

increased byInfinity%

Is type module

No

Dependency changes

• - Removed@codemirror/autocomplete@^6.0.0

• - Removed@codemirror/commands@^6.0.0

• - Removed@codemirror/language@^6.0.0

• - Removed@codemirror/lint@^6.0.0

• - Removed@codemirror/search@^6.0.0

• - Removed@codemirror/state@^6.0.0

• - Removed@codemirror/view@^6.0.0

• - Removed@codemirror/autocomplete@6.18.3(transitive)

• - Removed@codemirror/commands@6.7.1(transitive)

• - Removed@codemirror/language@6.10.3(transitive)

• - Removed@codemirror/lint@6.8.2(transitive)

• - Removed@codemirror/search@6.5.7(transitive)

• - Removed@codemirror/state@6.4.1(transitive)

• - Removed@codemirror/view@6.34.2(transitive)

• - Removed@lezer/common@1.2.3(transitive)

• - Removed@lezer/highlight@1.2.1(transitive)

• - Removed@lezer/lr@1.4.2(transitive)

• - Removedcrelt@1.0.6(transitive)

• - Removedstyle-mod@4.1.2(transitive)

• - Removedw3c-keyname@2.2.8(transitive)