conf - npm Package Compare versions

Comparing version 6.2.4 to 7.0.0

package.json

 {
 	"name": "conf",
-	"version": "6.2.4",
+	"version": "7.0.0",
 	"description": "Simple config handling for your app or module",
@@ -13,11 +13,13 @@ "license": "MIT",
 	},
+	"main": "dist/source",
 	"engines": {
-		"node": ">=8"
+		"node": ">=10"
 	},
 	"scripts": {
-		"test": "xo && ava && tsd"
+		"test": "xo && npm run build && nyc ava",
+		"build": "del-cli dist && tsc",
+		"prepare": "npm run build"
 	},
 	"files": [
-		"index.js",
-		"index.d.ts"
+		"dist/source"
 	],
@@ -44,24 +46,52 @@ "keywords": [
 	"dependencies": {
-		"ajv": "^6.10.2",
-		"debounce-fn": "^3.0.1",
-		"dot-prop": "^5.0.0",
+		"ajv": "^6.12.2",
+		"debounce-fn": "^4.0.0",
+		"dot-prop": "^5.2.0",
 		"env-paths": "^2.2.0",
-		"json-schema-typed": "^7.0.1",
-		"make-dir": "^3.0.0",
+		"json-schema-typed": "^7.0.3",
+		"make-dir": "^3.1.0",
 		"onetime": "^5.1.0",
-		"pkg-up": "^3.0.1",
-		"semver": "^6.2.0",
-		"write-file-atomic": "^3.0.0"
+		"pkg-up": "^3.1.0",
+		"semver": "^7.3.2",
+		"write-file-atomic": "^3.0.3"
 	},
 	"devDependencies": {
-		"@types/node": "^12.7.4",
-		"ava": "^2.3.0",
-		"clear-module": "^4.0.0",
+		"@ava/typescript": "^1.1.1",
+		"@sindresorhus/tsconfig": "^0.7.0",
+		"@types/node": "^14.0.14",
+		"@types/semver": "^7.3.1",
+		"@types/write-file-atomic": "^3.0.1",
+		"ava": "^3.9.0",
+		"clear-module": "^4.1.1",
 		"del": "^5.1.0",
+		"del-cli": "^3.0.1",
 		"delay": "^4.3.0",
-		"p-event": "^4.1.0",
-		"tempy": "^0.3.0",
-		"tsd": "^0.11.0",
-		"xo": "^0.24.0"
+		"nyc": "^15.1.0",
+		"p-event": "^4.2.0",
+		"tempy": "^0.5.0",
+		"tsd": "^0.12.1",
+		"typescript": "3.9.6",
+		"xo": "^0.32.0"
+	},
+	"types": "dist/source",
+	"ava": {
+		"files": [
+			"test/*",
+			"!test/index.test-d.ts"
+		],
+		"timeout": "1m",
+		"typescript": {
+			"rewritePaths": {
+				"test/": "dist/test/"
+			}
+		}
+	},
+	"nyc": {
+		"extension": [
+			".ts"
+		],
+		"exclude": [
+			"**/test/**"
+		]
 	}
 }

readme.md

@@ -1,2 +0,2 @@
-# conf [![Build Status](https://travis-ci.org/sindresorhus/conf.svg?branch=master)](https://travis-ci.org/sindresorhus/conf)
+# conf [![Build Status](https://travis-ci.com/sindresorhus/conf.svg?branch=master)](https://travis-ci.com/github/sindresorhus/conf)
 
@@ -64,3 +64,3 @@ > Simple config handling for your app or module
 
-Under the hood, the JSON Schema validator [ajv](https://github.com/epoberezkin/ajv) is used to validate your config. We use [JSON Schema draft-07](http://json-schema.org/latest/json-schema-validation.html) and support all [validation keywords](https://github.com/epoberezkin/ajv/blob/master/KEYWORDS.md) and [formats](https://github.com/epoberezkin/ajv#formats).
+Under the hood, the JSON Schema validator [ajv](https://github.com/epoberezkin/ajv) is used to validate your config. We use [JSON Schema draft-07](https://json-schema.org/latest/json-schema-validation.html) and support all [validation keywords](https://github.com/epoberezkin/ajv/blob/master/KEYWORDS.md) and [formats](https://github.com/epoberezkin/ajv#formats).
 
@@ -67,0 +67,0 @@ You should define your schema as an object where each key is the name of your data's property and each value is a JSON schema used to validate that property. See more [here](https://json-schema.org/understanding-json-schema/reference/object.html#properties).

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Empty package

Supply chain risk

Package does not contain any code. It may be removed, is name squatting, or the result of a faulty package publish.

Found 1 instance in 1 package

Major refactor

Supply chain risk

Package has recently undergone a major refactor. It may be unstable or indicate significant internal changes. Use caution when updating to versions that include significant changes.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 1 instance in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

Improved metrics

Number of low supply chain risk alerts

1

decreased by-66.67%

Worsened metrics

Total package byte prevSize

16893

decreased by-53.82%

Dev dependency count

16

increased by77.78%

Number of package files

4

decreased by-20%

Lines of code

0

decreased by-100%

Number of medium supply chain risk alerts

2

increased byInfinity%

Dependency changes

• + Addeddebounce-fn@4.0.0(transitive)

• + Addedmimic-fn@3.1.0(transitive)

• + Addedsemver@7.6.3(transitive)

• - Removeddebounce-fn@3.0.1(transitive)

• Updatedajv@^6.12.2

• Updateddebounce-fn@^4.0.0

• Updateddot-prop@^5.2.0

• Updatedjson-schema-typed@^7.0.3

• Updatedmake-dir@^3.1.0

• Updatedpkg-up@^3.1.0

• Updatedsemver@^7.3.2

• Updatedwrite-file-atomic@^3.0.3