cytoscape - npm Package Compare versions

Comparing version 2.3.16 to 2.4.0

package.json

 {
   "name": "cytoscape",
-  "version": "2.3.16",
+  "version": "2.4.0",
   "license": "LGPL-3.0+",
@@ -68,5 +68,6 @@ "description": "Graph theory (a.k.a. network) library for analysis and visualisation",
     "test": "./node_modules/gulp/bin/gulp.js test",
-    "sniper": "biojs-sniper ." 
+    "sniper": "biojs-sniper ."
   },
   "devDependencies": {
+    "benchmark": "^1.0.0",
     "biojs-sniper": "^0.1.1",
@@ -76,10 +77,14 @@ "bluebird": "^2.0.2",
     "chai": "^1.9.0",
+    "del": "^1.1.1",
     "gulp": "^3.5.2",
-    "gulp-clean": "^0.2.4",
+    "gulp-benchmark": "^1.1.1",
     "gulp-concat": "^2.2.0",
     "gulp-cssmin": "^0.1.4",
+    "gulp-decompress": "^1.0.2",
+    "gulp-download": "0.0.1",
     "gulp-htmlmin": "^0.1.2",
     "gulp-inject": "^0.4.1",
     "gulp-jshint": "^1.5.5",
-    "gulp-mocha": "^0.4.1",
+    "gulp-mocha": "^2.0.1",
+    "gulp-rename": "^1.2.2",
     "gulp-replace": "^0.2.0",
@@ -89,3 +94,3 @@ "gulp-shell": "^0.2.4",
     "gulp-uglify": "^1.1.0",
-    "gulp-zip": "^0.1.2",
+    "gulp-zip": "^3.0.0",
     "handlebars": "^1.3.0",
@@ -98,6 +103,10 @@ "highlight.js": "^8.0.0",
     "run-sequence": "^0.3.6",
+    "vinyl-paths": "^1.0.0",
     "vinyl-source-stream": "^1.0.0"
   },
   "sniper": {
-    "js": ["http://ajax.googleapis.com/ajax/libs/jquery/1/jquery.min.js", "/build/cytoscape.browserify.js"],
+    "js": [
+      "http://ajax.googleapis.com/ajax/libs/jquery/1/jquery.min.js",
+      "/build/cytoscape.browserify.js"
+    ],
     "first": "images"
@@ -104,0 +113,0 @@ },

README.md

@@ -91,2 +91,4 @@ # Cytoscape.js
  * `lint` : lint the JS sources via jshint
+ * `benchmark` : run benchmark regression tests
+ * `benchmark-single` : run benchmarks only for the suite specified in `benchmark/single`
  * `watch` : update JS refs in HTML files (debug page, test page) automatically when JS files are added or deleted
@@ -112,9 +114,3 @@
  1. Confirm all tests passing: `gulp test`
- 1. Build and publish the release: `gulp pub`, and then...
-  1. Make sure all your changes are pushed.
-  1. Create a tag for this version in `git` (e.g. `gulp tag`)
-  1. Copy the docs in `documentation` to the `gh-pages` branch and push (e.g. `gulp docspush`)
-  1. Publish to npm (e.g. `gulp npm`)
-  1. Publish to spm (e.g. `gulp spm`)
-  1. Publish to meteor (e.g. `gulp meteor`)
+ 1. Build and publish the release: `gulp publish`
 
@@ -134,7 +130,7 @@
 
-[ISB](http://www.systemsbiology.org) | 
-[UCSD](http://www.ucsd.edu) | 
-[MSKCC](http://cbio.mskcc.org) | 
-[Pasteur](http://www.pasteur.fr) | 
-[Agilent](http://www.agilent.com/) | 
+[ISB](http://www.systemsbiology.org) |
+[UCSD](http://www.ucsd.edu) |
+[MSKCC](http://cbio.mskcc.org) |
+[Pasteur](http://www.pasteur.fr) |
+[Agilent](http://www.agilent.com/) |
 [UCSF](http://www.ucsf.edu/) |
@@ -145,3 +141,1 @@ [Unilever](http://www.unilever.com) |
 [NRNB](http://nrnb.org)
-
-

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Shell access

Supply chain risk

This module accesses the system shell. Accessing the system shell increases the risk of executing arbitrary code.

Found 1 instance in 1 package

Uses eval

Supply chain risk

Package uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Found 1 instance in 1 package

Dynamic require

Supply chain risk

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Dynamic require

Supply chain risk

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

2963540

increased by57.64%

Number of package files

28

increased by40%

Lines of code

84257

increased by53.46%

Worsened metrics

Dev dependency count

31

increased by24%

Number of lines in readme file

138

decreased by-4.17%

Number of low supply chain risk alerts

16

increased by60%

Number of medium supply chain risk alerts

3

increased byInfinity%

No dependency changes