ctrf-cli - npm Package Compare versions

Comparing version 0.0.5-next-1 to 0.0.5

package.json

 {
   "type": "module",
   "name": "ctrf-cli",
-  "version": "0.0.5-next-1",
+  "version": "0.0.5",
   "description": "Various CTRF utilities available from the command line",
@@ -34,7 +34,23 @@ "main": "dist/index.js",
   "homepage": "https://ctrf.io",
-  "author": "Matthew Thomas",
+  "author": "Matthew Poulton-White",
   "license": "MIT",
+  "security": {
+    "email": "[e-mail]",
+    "url": "https://github.com/ctrf-io/security/blob/main/SECURITY.md"
+  },
+  "keywords": [
+    "test",
+    "testing",
+    "ctrf",
+    "reporter",
+    "report",
+    "json",
+    "standard",
+    "cli",
+    "command-line",
+    "test-results"
+  ],
   "dependencies": {
-    "ctrf": "^0.0.18-next-1",
-    "glob": "^11.0.1",
+    "ctrf": "^0.1.0",
+    "glob": "^13.0.1",
     "typescript": "^5.4.5",
@@ -48,3 +64,3 @@ "yargs": "^17.7.2"
     "@types/yargs": "^17.0.32",
-    "@vitest/coverage-v8": "^3.2.4",
+    "@vitest/coverage-v8": "^4.0.18",
     "eslint": "^9.32.0",
@@ -54,4 +70,4 @@ "prettier": "^3.5.3",
     "typescript-eslint": "^8.38.0",
-    "vitest": "^3.2.4"
+    "vitest": "^4.0.18"
   }
 }

README.md

@@ -5,15 +5,17 @@ # CTRF CLI Reference Implementation
 
-## Open Standard
+## CTRF Open Standard
 
-[CTRF](https://github.com/ctrf-io/ctrf) is an open standard built and shaped by community contributions.
+CTRF is a community-driven open standard for test reporting.
 
-Your feedback and contributions are essential to the project's success:
+By standardizing test results, reports can be validated, merged, compared, and analyzed consistently across languages and frameworks.
 
-- [Contribute](CONTRIBUTING.md)
-- [Discuss](https://github.com/orgs/ctrf-io/discussions)
+- **CTRF Specification**: https://github.com/ctrf-io/ctrf  
+  The official specification defining the format and semantics
+- **Discussions**: https://github.com/orgs/ctrf-io/discussions  
+  Community forum for questions, ideas, and support
 
-## Support
+> [!NOTE]  
+> ⭐ Starring the **CTRF specification repository** (https://github.com/ctrf-io/ctrf)
+> helps support the standard.
 
-You can support the project by giving this repository a star ⭐
-
 ## Usage
@@ -26,3 +28,3 @@
 ```bash
-npx ctrf-cli@0.0.5-next-1 validate report.json
+npx ctrf-cli@0.0.5 validate report.json
 ```
@@ -35,3 +37,3 @@
 ```bash [npm]
-npm install -g ctrf-cli@0.0.5-next-1
+npm install -g ctrf-cli@0.0.5
 ```
@@ -38,0 +40,0 @@

New alerts

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

Fixed alerts

Major refactor

Supply chain risk

Package has recently undergone a major refactor. It may be unstable or indicate significant internal changes. Use caution when updating to versions that include significant changes.

Found 1 instance in 1 package

New author

Supply chain risk

A new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.

Found 1 instance in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

86576

0.58%

Number of lines in readme file

260

0.78%

Number of medium supply chain risk alerts

0

-100%

Dependency changes

• + Added

  ctrf@0.1.0
  (transitive)

• - Removed

  @isaacs/cliui@9.0.0
  (transitive)

• - Removed

  cross-spawn@7.0.6
  (transitive)

• - Removed

  ctrf@0.0.18-next-1
  (transitive)

• - Removed

  foreground-child@3.3.1
  (transitive)

• - Removed

  glob@11.1.0
  (transitive)

• - Removed

  isexe@2.0.0
  (transitive)

• - Removed

  jackspeak@4.2.3
  (transitive)

• - Removed

  package-json-from-dist@1.0.1
  (transitive)

• - Removed

  path-key@3.1.1
  (transitive)

• - Removed

  shebang-command@2.0.0
  (transitive)

• - Removed

  shebang-regex@3.0.0
  (transitive)

• - Removed

  signal-exit@4.1.0
  (transitive)

• - Removed

  which@2.0.2
  (transitive)

• Updated

  ctrf@^0.1.0

• Updated

  glob@^13.0.1