create-next-app - npm Package Compare versions

Comparing version 9.0.3-canary.1 to 9.0.3-canary.2

package.json

 {
   "name": "create-next-app",
-  "description": "Create Next.js apps in one command",
-  "version": "9.0.3-canary.1",
-  "main": "index.js",
+  "version": "9.0.3-canary.2",
+  "keywords": [
+    "react",
+    "next",
+    "next.js"
+  ],
+  "description": "Create Next.js-powered React apps with one command",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/zeit/next.js",
+    "directory": "packages/create-next-app"
+  },
+  "author": "Next.js Team <[e-mail]>",
   "license": "MIT",
   "bin": {
-    "create-next-app": "./cli.js"
+    "create-next-app": "./dist/index.js"
   },
-  "engines": {
-    "node": ">=4"
+  "files": [
+    "dist"
+  ],
+  "scripts": {
+    "build": "ncc build ./index.ts -w -o dist/",
+    "prerelease": "rimraf ./dist/",
+    "release": "ncc build ./index.ts -o ./dist/ --minify --no-cache --no-source-map-register",
+    "prepublish": "yarn release"
   },
-  "repository": "zeit/next.js",
-  "bugs": "https://github.com/zeit/next.js/issues",
-  "homepage": "https://nextjs.org",
-  "dependencies": {
-    "@octokit/rest": "^15.9.4",
-    "ansi-escapes": "^2.0.0",
-    "chalk": "^1.1.3",
-    "commander": "^2.9.0",
-    "execa": "^0.6.3",
-    "fs-extra": "^3.0.0",
-    "got": "^8.3.1",
-    "make-dir": "^1.3.0",
-    "ms": "^1.0.0",
-    "mz": "^2.6.0",
-    "ora": "^1.2.0",
-    "promise": "^7.1.1",
-    "tar": "^4.4.4"
+  "devDependencies": {
+    "@types/got": "9.6.2",
+    "@types/node": "^12.6.8",
+    "@types/prompts": "2.0.1",
+    "@types/tar": "4.0.3",
+    "@zeit/ncc": "^0.20.4",
+    "chalk": "2.4.2",
+    "commander": "2.20.0",
+    "cpy": "7.3.0",
+    "cross-spawn": "6.0.5",
+    "got": "9.6.0",
+    "make-dir": "3.0.0",
+    "promisepipe": "3.0.0",
+    "prompts": "2.1.0",
+    "rimraf": "2.6.3",
+    "tar": "4.4.10",
+    "typescript": "^3.5.3",
+    "update-check": "1.5.3",
+    "validate-npm-package-name": "3.0.0"
   },
-  "keywords": [
-    "next",
-    "react",
-    "next.js",
-    "create-next-app",
-    "create-react-app",
-    "boilerplate"
-  ],
-  "gitHead": "2758060bfcf739a72e04dc32b3f7b98dfce8d435"
+  "gitHead": "5a54e8715a7a7a92175addc19f4ec9f8f7bbd2e7"
 }

New alerts

Major refactor

Supply chain risk

Package has recently undergone a major refactor. It may be unstable or indicate significant internal changes. Use caution when updating to versions that include significant changes.

Found 1 instance in 1 package

Network access

Supply chain risk

This module accesses the network.

Found 4 instances in 1 package

No README

Quality

Package does not have a README. This may indicate a failed publish or a low quality package.

Found 1 instance in 1 package

Shell access

Supply chain risk

This module accesses the system shell. Accessing the system shell increases the risk of executing arbitrary code.

Found 1 instance in 1 package

Dynamic require

Supply chain risk

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 18 instances in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

Minified code

Quality

This package contains minified code. This may be harmless in some cases where minified code is included in packaged libraries, however packages on npm should not minify code.

Found 1 instance in 1 package

No bug tracker

Maintenance

Package does not have a linked bug tracker in package.json.

Found 1 instance in 1 package

No website

Quality

Package does not have a website.

Found 1 instance in 1 package

Fixed alerts

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 2 instances in 1 package

No contributors or author data

Maintenance

Package does not specify a list of contributors or an author in package.json.

Found 1 instance in 1 package

No repository

Supply chain risk

Package does not have a linked source code repository. Without this field, a package will have no reference to the location of the source code use to generate the package.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

617580

increased by1159.6%

Dependency count

0

decreased by-100%

Number of low maintenance alerts

1

decreased by-50%

Worsened metrics

Dev dependency count

18

increased byInfinity%

Number of package files

8

decreased by-60%

Lines of code

147

decreased by-74.61%

Number of low quality alerts

3

increased by200%

Number of medium quality alerts

1

increased byInfinity%

Number of lines in readme file

0

decreased by-100%

Number of low supply chain risk alerts

46

increased by1433.33%

Number of medium supply chain risk alerts

6

increased byInfinity%

Dependency changes

• - Removed@octokit/rest@^15.9.4

• - Removedansi-escapes@^2.0.0

• - Removedchalk@^1.1.3

• - Removedcommander@^2.9.0

• - Removedexeca@^0.6.3

• - Removedfs-extra@^3.0.0

• - Removedgot@^8.3.1

• - Removedmake-dir@^1.3.0

• - Removedms@^1.0.0

• - Removedmz@^2.6.0

• - Removedora@^1.2.0

• - Removedpromise@^7.1.1

• - Removedtar@^4.4.4

• - Removed@octokit/rest@15.18.3(transitive)

• - Removed@sindresorhus/is@0.7.0(transitive)

• - Removedagent-base@4.3.0(transitive)

• - Removedansi-escapes@2.0.0(transitive)

• - Removedansi-regex@2.1.1(transitive)

• - Removedansi-styles@2.2.13.2.1(transitive)

• - Removedany-promise@1.3.0(transitive)

• - Removedasap@2.0.6(transitive)

• - Removedbefore-after-hook@1.4.0(transitive)

• - Removedbtoa-lite@1.0.0(transitive)

• - Removedcacheable-request@2.1.4(transitive)

• - Removedchalk@1.1.32.4.2(transitive)

• - Removedchownr@1.1.4(transitive)

• - Removedcli-cursor@2.1.0(transitive)

• - Removedcli-spinners@1.3.1(transitive)

• - Removedclone-response@1.0.2(transitive)

• - Removedcolor-convert@1.9.3(transitive)

• - Removedcolor-name@1.1.3(transitive)

• - Removedcommander@2.20.3(transitive)

• - Removedcore-util-is@1.0.3(transitive)

• - Removedcross-spawn@5.1.06.0.6(transitive)

• - Removeddebug@3.1.03.2.7(transitive)

• - Removeddecode-uri-component@0.2.2(transitive)

• - Removeddecompress-response@3.3.0(transitive)

• - Removedduplexer3@0.1.5(transitive)

• - Removedend-of-stream@1.4.4(transitive)

• - Removedes6-promise@4.2.8(transitive)

• - Removedes6-promisify@5.0.0(transitive)

• - Removedescape-string-regexp@1.0.5(transitive)

• - Removedexeca@0.6.31.0.0(transitive)

• - Removedfrom2@2.3.0(transitive)

• - Removedfs-extra@3.0.1(transitive)

• - Removedfs-minipass@1.2.7(transitive)

• - Removedget-stream@3.0.04.1.0(transitive)

• - Removedgot@8.3.2(transitive)

• - Removedgraceful-fs@4.2.11(transitive)

• - Removedhas-ansi@2.0.0(transitive)

• - Removedhas-flag@3.0.0(transitive)

• - Removedhas-symbol-support-x@1.4.2(transitive)

• - Removedhas-to-string-tag-x@1.4.1(transitive)

• - Removedhttp-cache-semantics@3.8.1(transitive)

• - Removedhttp-proxy-agent@2.1.0(transitive)

• - Removedhttps-proxy-agent@2.2.4(transitive)

• - Removedinherits@2.0.4(transitive)

• - Removedinto-stream@3.1.0(transitive)

• - Removedis-object@1.0.2(transitive)

• - Removedis-plain-obj@1.1.0(transitive)

• - Removedis-retry-allowed@1.2.0(transitive)

• - Removedis-stream@1.1.0(transitive)

• - Removedisarray@1.0.0(transitive)

• - Removedisexe@2.0.0(transitive)

• - Removedisurl@1.0.0(transitive)

• - Removedjson-buffer@3.0.0(transitive)

• - Removedjsonfile@3.0.1(transitive)

• - Removedkeyv@3.0.0(transitive)

• - Removedlodash@4.17.21(transitive)

• - Removedlog-symbols@2.2.0(transitive)

• - Removedlowercase-keys@1.0.01.0.1(transitive)

• - Removedlru-cache@4.1.5(transitive)

• - Removedmacos-release@2.5.1(transitive)

• - Removedmake-dir@1.3.0(transitive)

• - Removedmimic-fn@1.2.0(transitive)

• - Removedmimic-response@1.0.1(transitive)

• - Removedminimist@1.2.8(transitive)

• - Removedminipass@2.9.0(transitive)

• - Removedminizlib@1.3.3(transitive)

• - Removedmkdirp@0.5.6(transitive)

• - Removedms@1.0.02.0.02.1.3(transitive)

• - Removedmz@2.7.0(transitive)

• - Removednice-try@1.0.5(transitive)

• - Removednode-fetch@2.7.0(transitive)

• - Removednormalize-url@2.0.1(transitive)

• - Removednpm-run-path@2.0.2(transitive)

• - Removedobject-assign@4.1.1(transitive)

• - Removedonce@1.4.0(transitive)

• - Removedonetime@2.0.1(transitive)

• - Removedora@1.4.0(transitive)

• - Removedos-name@3.1.0(transitive)

• - Removedp-cancelable@0.4.1(transitive)

• - Removedp-finally@1.0.0(transitive)

• - Removedp-is-promise@1.1.0(transitive)

• - Removedp-timeout@2.0.1(transitive)

• - Removedpath-key@2.0.1(transitive)

• - Removedpify@3.0.0(transitive)

• - Removedprepend-http@2.0.0(transitive)

• - Removedprocess-nextick-args@2.0.1(transitive)

• - Removedpromise@7.3.1(transitive)

• - Removedpseudomap@1.0.2(transitive)

• - Removedpump@3.0.2(transitive)

• - Removedquery-string@5.1.1(transitive)

• - Removedreadable-stream@2.3.8(transitive)

• - Removedresponselike@1.0.2(transitive)

• - Removedrestore-cursor@2.0.0(transitive)

• - Removedsafe-buffer@5.1.25.2.1(transitive)

• - Removedsemver@5.7.2(transitive)

• - Removedshebang-command@1.2.0(transitive)

• - Removedshebang-regex@1.0.0(transitive)

• - Removedsignal-exit@3.0.7(transitive)

• - Removedsort-keys@2.0.0(transitive)

• - Removedstrict-uri-encode@1.1.0(transitive)

• - Removedstring_decoder@1.1.1(transitive)

• - Removedstrip-ansi@3.0.1(transitive)

• - Removedstrip-eof@1.0.0(transitive)

• - Removedsupports-color@2.0.05.5.0(transitive)

• - Removedtar@4.4.19(transitive)

• - Removedthenify@3.3.1(transitive)

• - Removedthenify-all@1.6.0(transitive)

• - Removedtimed-out@4.0.1(transitive)

• - Removedtr46@0.0.3(transitive)

• - Removeduniversal-user-agent@2.1.0(transitive)

• - Removeduniversalify@0.1.2(transitive)

• - Removedurl-parse-lax@3.0.0(transitive)

• - Removedurl-template@2.0.8(transitive)

• - Removedurl-to-options@1.0.1(transitive)

• - Removedutil-deprecate@1.0.2(transitive)

• - Removedwebidl-conversions@3.0.1(transitive)

• - Removedwhatwg-url@5.0.0(transitive)

• - Removedwhich@1.3.1(transitive)

• - Removedwindows-release@3.3.3(transitive)

• - Removedwrappy@1.0.2(transitive)

• - Removedyallist@2.1.23.1.1(transitive)