contentful - npm Package Compare versions

Comparing version 3.8.1 to 4.0.0

index.js

@@ -1,16 +0,3 @@
-// To understand why axios is vendored, check SETUP.md
-var axios = require('contentful-sdk-core/vendor-node/axios')
-var contentful
-try {
-  contentful = require('./dist/contentful').default
-} catch (err) {
-  if (err.code === 'MODULE_NOT_FOUND') {
-    require('babel-register')
-    contentful = require('./lib/contentful').default
-  } else {
-    console.log(err)
-    process.exit(1)
-  }
-}
-
+var axios = require('axios')
+var contentful = require('./dist/contentful').default
 module.exports = {
@@ -17,0 +4,0 @@ createClient: function (params) {

package.json

 {
   "name": "contentful",
+  "version": "4.0.0",
   "description": "Client for Contentful's Content Delivery API",
@@ -14,11 +15,13 @@ "homepage": "https://www.contentful.com/developers/documentation/content-delivery-api/",
   "scripts": {
-    "clean": "rimraf dist && rimraf browser-dist && rimraf coverage && rimraf out",
-    "build:ci": "npm run vendor:version && npm run build:dist && npm run build:standalone",
+    "clean": "rimraf dist && rimraf coverage",
     "build": "npm run clean && npm run build:ci",
-    "build:dist": "babel lib --out-dir dist",
-    "build:standalone": "webpack && webpack -p --output-filename contentful.min.js",
-    "docs:build": "jsdoc -r -c ./jsdoc.json dist",
+    "build:ci": "npm run vendor:version && npm run build:standalone",
+    "build:standalone": "BABEL_ENV=webpack webpack && BABEL_ENV=webpack webpack -p --output-filename contentful.min.js",
+    "build:standalone:log": "BABEL_ENV=webpack npm run build && webpack -p --json --profile --output-filename contentful.min.js > webpack-build-log.json",
+    "docs:build": "esdoc -c esdoc.json",
     "docs:dev": "npm run build && npm run docs:build",
     "docs:watch": "watchy -w lib npm run docs:dev",
     "docs:publish": "npm run docs:build && ./node_modules/contentful-sdk-jsdoc/bin/publish-docs.sh contentful.js contentful",
+    "lint": "eslint lib test",
+    "pretest": "npm run lint",
     "test:ci": "npm run build && ./node_modules/contentful-sdk-core/bin/test-ci.sh",
@@ -28,5 +31,7 @@ "test:cover": "BABEL_ENV=test babel-node ./node_modules/istanbul/lib/cli.js cover test/runner",
     "test:debug": "BABEL_ENV=test babel-node debug ./test/runner",
-    "test:integration": "babel-node ./test/integration/tests.js",
-    "test:browser-local": "BABEL_ENV=test ./node_modules/.bin/karma start karma.conf.local.js",
-    "test:browser-remote": "BABEL_ENV=test ./node_modules/.bin/karma start karma.conf.saucelabs.js",
+    "test:integration": "BABEL_ENV=test babel-node ./test/integration/tests.js",
+    "test:integration-debug": "BABEL_ENV=test babel-node debug ./test/integration/tests.js",
+    "test:browser-local": "BABEL_ENV=test karma start karma.conf.local.js",
+    "test:browser-remote": "BABEL_ENV=test karma start karma.conf.saucelabs.js",
+    "test:simulate-ci": "trevor",
     "vendor:version": "echo \"module.exports = '`cat package.json|json version`'\" > version.js",
@@ -42,34 +47,44 @@ "browser-coverage": "npm run test:cover && opener coverage/lcov-report/index.html",
     "devdep:install": "npm run devdep:build && rm -rf node_modules/contentful-sdk-core && npm install ../contentful-sdk-core && npm run devdep:clean",
-    "devdep:uninstall": "npm run devdep:clean && rimraf node_modules/contentful-sdk-core"
+    "devdep:uninstall": "npm run devdep:clean && rimraf node_modules/contentful-sdk-core",
+    "precommit": "npm run lint",
+    "prepush": "npm run test:only"
   },
-  "browser": "./browser.js",
-  "node": "./browser.js",
+  "types": "./index.d.ts",
   "files": [
-    "browser.js",
     "index.js",
     "version.js",
     "dist",
-    "browser-dist",
     "tonic-example.js"
   ],
   "dependencies": {
-    "babel-runtime": "~6.3.19",
-    "contentful-sdk-core": "~2.5.0",
-    "json-stringify-safe": "~5.0.1",
-    "lodash": "~4.2.0"
+    "json-stringify-safe": "^5.0.1",
+    "lodash": "^4.17.4",
+    "axios": "~0.15.3",
+    "contentful-sdk-core": "^3.5.10",
+    "es6-promise": "^4.0.5"
   },
   "devDependencies": {
-    "axios": "^0.9.1",
-    "babel-cli": "^6.4.5",
-    "babel-eslint": "^6.0.3",
-    "babel-loader": "^6.2.2",
-    "babel-plugin-rewire": "^1.0.0-beta-5",
-    "babel-plugin-transform-runtime": "^6.4.3",
-    "babel-preset-es2015": "^6.3.13",
-    "babel-register": "^6.4.3",
-    "blue-tape": "^0.2.0",
-    "contentful-sdk-jsdoc": "^1.2.0",
-    "coveralls": "^2.11.6",
-    "cz-conventional-changelog": "^1.1.5",
-    "ghooks": "^1.3.2",
+    "babel-cli": "^6.7.5",
+    "babel-core": "^6.22.1",
+    "babel-eslint": "^7.1.1",
+    "babel-loader": "^6.2.4",
+    "babel-plugin-add-module-exports": "^0.2.1",
+    "babel-plugin-rewire": "^1.0.0",
+    "babel-plugin-transform-object-assign": "^6.22.0",
+    "babel-plugin-transform-runtime": "^6.7.5",
+    "babel-preset-env": "^1.1.8",
+    "babel-preset-es2015": "^6.6.0",
+    "babel-register": "^6.7.2",
+    "babel-template": "^6.22.0",
+    "babel-types": "^6.22.0",
+    "blue-tape": "^1.0.0",
+    "contentful-sdk-jsdoc": "^1.2.2",
+    "coveralls": "^2.11.9",
+    "cz-conventional-changelog": "^1.1.6",
+    "esdoc": "^0.5.2",
+    "eslint": "^3.16.0",
+    "eslint-config-standard": "^6.2.1",
+    "eslint-plugin-promise": "^3.4.2",
+    "eslint-plugin-standard": "^2.0.1",
+    "husky": "^0.13.1",
     "in-publish": "^2.0.0",
@@ -79,30 +94,28 @@ "istanbul": "^1.0.0-alpha.2",
     "json": "^9.0.3",
-    "json-loader": "^0.5.4",
-    "karma": "^0.13.21",
+    "karma": "^1.4.1",
     "karma-babel-preprocessor": "^6.0.1",
-    "karma-chrome-launcher": "^0.2.2",
-    "karma-sauce-launcher": "^0.3.0",
-    "karma-tap": "^1.0.3",
-    "karma-webpack": "^1.7.0",
+    "karma-chrome-launcher": "^2.0.0",
+    "karma-sauce-launcher": "^1.1.0",
+    "karma-tap": "^3.1.1",
+    "karma-webpack": "^2.0.2",
+    "lodash-webpack-plugin": "^0.11.2",
     "mkdirp": "^0.5.1",
-    "opener": "^1.4.1",
-    "require-all": "^2.0.0",
-    "rimraf": "^2.5.1",
-    "semantic-release": "^4.3.5",
+    "require-all": "^2.2.0",
+    "rimraf": "^2.6.0",
+    "semantic-release": "^6.3.2",
     "sinon": "^2.0.0-pre",
-    "standard": "^6.0.8",
-    "webpack": "^1.12.13"
+    "trevor": "^2.2.0",
+    "webpack": "^2.2.1"
   },
-  "standard": {
-    "parser": "babel-eslint"
+  "engines": {
+    "node": ">=4.7.2"
   },
+  "publishConfig": {
+    "tag": "beta"
+  },
   "config": {
     "commitizen": {
       "path": "./node_modules/cz-conventional-changelog"
-    },
-    "ghooks": {
-      "pre-commit": "npm run test:only"
     }
-  },
-  "version": "3.8.1"
-}
+  }
+}

version.js

@@ -1,1 +0,1 @@
-module.exports = '3.8.1'
+module.exports = '4.0.0'

New alerts

Major refactor

Supply chain risk

Package has recently undergone a major refactor. It may be unstable or indicate significant internal changes. Use caution when updating to versions that include significant changes.

Found 1 instance in 1 package

Uses eval

Supply chain risk

Package uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Found 2 instances in 1 package

Dynamic require

Supply chain risk

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 1 instance in 1 package

Worsened metrics

Total package byte prevSize

335616

decreased by-30.32%

Dependency count

5

increased by25%

Dev dependency count

41

increased by28.13%

Number of package files

8

decreased by-60%

Lines of code

8187

decreased by-27.28%

Number of low supply chain risk alerts

2

increased byInfinity%

Number of medium supply chain risk alerts

5

increased byInfinity%

Dependency changes

• + Addedaxios@~0.15.3

• + Addedes6-promise@^4.0.5

• + Addedansi-regex@2.1.1(transitive)

• + Addedaproba@1.2.0(transitive)

• + Addedare-we-there-yet@1.1.7(transitive)

• + Addedaxios@0.15.3(transitive)

• + Addedcode-point-at@1.1.0(transitive)

• + Addedconsole-control-strings@1.1.0(transitive)

• + Addedcontentful-sdk-core@3.14.4(transitive)

• + Addedcore-util-is@1.0.3(transitive)

• + Addeddelegates@1.0.0(transitive)

• + Addedes6-promise@4.2.8(transitive)

• + Addedfollow-redirects@1.0.0(transitive)

• + Addedgauge@2.7.4(transitive)

• + Addedhas-unicode@2.0.1(transitive)

• + Addedinherits@2.0.4(transitive)

• + Addedis-fullwidth-code-point@1.0.0(transitive)

• + Addedisarray@1.0.0(transitive)

• + Addedlodash@4.17.21(transitive)

• + Addednpmlog@4.1.2(transitive)

• + Addednumber-is-nan@1.0.1(transitive)

• + Addedobject-assign@4.1.1(transitive)

• + Addedprocess-nextick-args@2.0.1(transitive)

• + Addedreadable-stream@2.3.8(transitive)

• + Addedsafe-buffer@5.1.2(transitive)

• + Addedset-blocking@2.0.0(transitive)

• + Addedsignal-exit@3.0.7(transitive)

• + Addedstring-width@1.0.2(transitive)

• + Addedstring_decoder@1.1.1(transitive)

• + Addedstrip-ansi@3.0.1(transitive)

• + Addedutil-deprecate@1.0.2(transitive)

• + Addedwide-align@1.1.5(transitive)

• - Removedbabel-runtime@~6.3.19

• - Removedbabel-runtime@6.3.19(transitive)

• - Removedcontentful-sdk-core@2.5.0(transitive)

• - Removedcore-js@1.2.7(transitive)

• - Removedfollow-redirects@0.0.7(transitive)

• - Removedlodash@4.2.1(transitive)

• - Removedstream-consume@0.1.1(transitive)

• Updatedcontentful-sdk-core@^3.5.10

• Updatedjson-stringify-safe@^5.0.1

• Updatedlodash@^4.17.4