consola - npm Package Compare versions

Comparing version 2.3.0 to 2.3.1

CHANGELOG.md

@@ -5,2 +5,12 @@ # Change Log
 
+<a name="2.3.1"></a>
+## [2.3.1](https://github.com/nuxt/consola/compare/v2.3.0...v2.3.1) (2019-01-02)
+
+
+### Bug Fixes
+
+* bypass webpack for lazy required version of winston ([500b509](https://github.com/nuxt/consola/commit/500b509))
+
+
+
 <a name="2.3.0"></a>
@@ -7,0 +17,0 @@ # [2.3.0](https://github.com/nuxt/consola/compare/v2.2.6...v2.3.0) (2018-11-19)

dist/consola.cjs.js

@@ -640,2 +640,4 @@ 'use strict';
 // https://github.com/winstonjs/winston
+const _require = require; // bypass webpack
+
 class WinstonReporter {
@@ -646,3 +648,3 @@ constructor(logger) {
     } else {
-      const winston = require('winston');
+      const winston = _require('winston');
 
@@ -649,0 +651,0 @@ this.logger = winston.createLogger(Object.assign({

package.json

 {
   "name": "consola",
-  "version": "2.3.0",
+  "version": "2.3.1",
   "description": "Elegant Console Logger for Node.js and Browser",
@@ -5,0 +5,0 @@ "license": "MIT",

New alerts

Dynamic require

Supply chain risk

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

49408

increased by0.57%

Lines of code

911

increased by0.11%

Worsened metrics

Number of low supply chain risk alerts

5

increased by25%

No dependency changes