command-join - npm Package Compare versions

Comparing version 1.0.1 to 1.1.0

package.json

 {
   "name": "command-join",
-  "version": "1.0.1",
+  "version": "1.1.0",
   "description": "Escape and join command-line arguments, cross-platform.",
-  "main": "command-join.js",
+  "main": "dist/command-join.js",
+  "files": [
+    "dist"
+  ],
   "scripts": {
-    "test": "mocha test/*.test.js"
+    "build": "babel command-join.js --out-dir dist && babel test --out-dir test-es5",
+    "test": "npm run build && mocha test-es5/*.test.js"
   },
@@ -28,8 +32,18 @@ "repository": {
   "devDependencies": {
+    "babel-cli": "^6.14.0",
+    "babel-core": "^6.14.0",
+    "babel-plugin-transform-es2015-arrow-functions": "^6.8.0",
+    "babel-plugin-transform-es2015-block-scoping": "^6.15.0",
+    "babel-plugin-transform-es2015-constants": "^6.1.4",
+    "babel-plugin-transform-es2015-template-literals": "^6.8.0",
     "chai": "^3.4.1",
-    "mocha": "^2.3.4"
+    "mocha": "^3.1.0"
   },
   "engines": {
-    "node": ">=4.0.0"
+    "node": ">=0.10"
+  },
+  "dependencies": {
+    "array-from": "^2.1.1",
+    "repeat-string": "^1.5.4"
   }
 }

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Empty package

Supply chain risk

Package does not contain any code. It may be removed, is name squatting, or the result of a faulty package publish.

Found 1 instance in 1 package

New author

Supply chain risk

A new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Shell access

Supply chain risk

This module accesses the system shell. Accessing the system shell increases the risk of executing arbitrary code.

Found 1 instance in 1 package

Worsened metrics

Total package byte prevSize

3750

decreased by-54.09%

Dependency count

2

increased byInfinity%

Dev dependency count

8

increased by300%

Number of package files

3

decreased by-70%

Lines of code

0

decreased by-100%

Number of medium supply chain risk alerts

2

increased by100%

Dependency changes

• + Addedarray-from@^2.1.1

• + Addedrepeat-string@^1.5.4

• + Addedarray-from@2.1.1(transitive)

• + Addedrepeat-string@1.6.1(transitive)