cssnano-preset-simple - npm Package Compare versions

Comparing version 1.2.1 to 1.2.2

package.json

 {
   "name": "cssnano-preset-simple",
-  "version": "1.2.1",
+  "version": "1.2.2",
   "description": "A simple cssnano preset",
@@ -15,3 +15,3 @@ "main": "dist/index.js",
     "prebuild": "rimraf dist/ && node patch.js",
-    "build": "ncc build src/index.js -o dist --minify --external postcss --external caniuse-lite",
+    "build": "ncc build src/index.js -o dist --minify --external postcss --external caniuse-lite --external caniuse-lite/dist/unpacker/feature --external caniuse-lite/dist/unpacker/region --external caniuse-lite/dist/unpacker/agents",
     "test": "jest",
@@ -23,18 +23,18 @@ "prepublishOnly": "yarn build && yarn test",
   "devDependencies": {
-    "@zeit/ncc": "^0.22.3",
+    "@vercel/ncc": "^0.27.0",
     "browserslist-config-google": "^1.5.0",
     "cssnano-preset-default-nightly": "0.8.4",
-    "cz-conventional-changelog": "3.2.0",
-    "husky": "^4.2.5",
-    "jest": "^26.2.2",
+    "cz-conventional-changelog": "3.3.0",
+    "husky": "^4.3.8",
+    "jest": "^26.6.3",
     "postcss-svgo": "file:./postcss-plugin-stub/",
     "postcss-svgo-nightly": "file:./postcss-plugin-stub/",
-    "prettier": "^2.0.5",
-    "pretty-quick": "^2.0.1",
+    "prettier": "^2.2.1",
+    "pretty-quick": "^3.1.0",
     "rimraf": "^3.0.0",
-    "semantic-release": "^17.1.1",
+    "semantic-release": "^17.3.7",
     "stylehacks-nightly": "0.8.4"
   },
   "dependencies": {
-    "caniuse-lite": "^1.0.30001093",
+    "caniuse-lite": "^1.0.30001179",
     "postcss": "^7.0.32"
@@ -41,0 +41,0 @@ },

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Dynamic require

Supply chain risk

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

Found 1 instance in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Dynamic require

Supply chain risk

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

Found 1 instance in 1 package

Worsened metrics

Total package byte prevSize

453813

decreased by-2.89%

Number of low supply chain risk alerts

29

increased by26.09%

Dependency changes

• Updatedcaniuse-lite@^1.0.30001179