cp-card - npm Package Compare versions

Comparing version 0.0.2 to 0.0.3

cp-card.js

 import CpBaseElement from 'cp-base-element/dist/compiled/cp-base-element';
+import './cp-card-styles';
 
@@ -3,0 +4,0 @@ const template = `

gulpfile.js

@@ -7,2 +7,4 @@ const gulp = require('gulp');
 const uglify = require('gulp-uglify');
+const rename = require('gulp-rename');
+const replace = require('gulp-replace');
 const sourcesHtmlSplitter = new HtmlSplitter();
@@ -12,3 +14,3 @@ const del = require('del');
 gulp.task('clean', () => {
-  return del(['dist/**/*'])
+  return del(['./*.compiled.*'])
 });
@@ -25,13 +27,12 @@
     })))
+    .pipe(gulpif(/\.html$/, replace(/<link rel="import" href="(.*?)(.html)">/g, '<link rel="import" href="$1.compiled$2">')))
     .pipe(sourcesHtmlSplitter.rejoin())
-    .pipe(gulp.dest('dist/compiled/'));
+    .pipe(rename({
+      suffix: ".compiled"
+    }))
+    .pipe(gulp.dest('./'));
 });
 
-gulp.task('build', () => {
-  return gulp.src(['./*.html', './*.js', '!./gulpfile.js'])
-    .pipe(gulp.dest('dist/default/'));
-});
-
 gulp.task('default',
-  gulp.series('clean', gulp.parallel('build', 'compile'))
+  gulp.series('clean', 'compile')
 );

package.json

 {
   "name": "cp-card",
-  "version": "0.0.2",
+  "version": "0.0.3",
   "description": "Card element for Customer Portal elements",
@@ -12,3 +12,2 @@ "repository": {
     "prepublish": "./node_modules/.bin/gulp",
-    "postinstall": "./node_modules/.bin/gulp",
     "build": "./node_modules/.bin/gulp"
@@ -18,3 +17,3 @@ },
   "license": "ISC",
-  "dependencies": {
+  "devDependencies": {
     "babel-cli": "^6.24.1",
@@ -28,5 +27,10 @@ "babel-plugin-external-helpers": "^6.22.0",
     "gulp-if": "^2.0.2",
+    "gulp-rename": "^1.2.2",
+    "gulp-replace": "^0.6.1",
     "gulp-uglify": "^3.0.0",
     "polymer-build": "^2.0.0"
+  },
+  "dependencies": {
+    "cp-base-element": "0.0.5"
   }
 }

New alerts

Minified code

Quality

This package contains minified code. This may be harmless in some cases where minified code is included in packaged libraries, however packages on npm should not minify code.

Found 1 instance in 1 package

Fixed alerts

GitHub dependency

Supply chain risk

Contains a dependency which resolves to a GitHub URL. Dependencies fetched from GitHub specifiers are not immutable can be used to inject untrusted code or reduce the likelihood of a reproducible install.

Found 1 instance in 1 package

Install scripts

Supply chain risk

Install scripts are run when the package is installed. The majority of malware in npm is hidden in install scripts.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

7898

108.89%

Dependency count

1

-90%

Number of package files

9

28.57%

Lines of code

75

4.17%

Number of high supply chain risk alerts

0

-100%

Worsened metrics

Dev dependency count

12

Infinity%

Number of low quality alerts

3

50%

Dependency changes

• + Added

  cp-base-element@0.0.5

• + Added

  cp-base-element@0.0.5
  (transitive)

• - Removed

  babel-cli@^6.24.1

• - Removed

  babel-plugin-external-helpers@^6.22.0

• - Removed

  babel-preset-es2015@^6.24.1

• - Removed

  del@^3.0.0

• - Removed

  gulp@github:gulpjs/gulp#4.0

• - Removed

  gulp-babel@^6.1.2

• - Removed

  gulp-html-minifier@^0.1.8

• - Removed

  gulp-if@^2.0.2

• - Removed

  gulp-uglify@^3.0.0

• - Removed

  polymer-build@^2.0.0