derequire - npm Package Compare versions

Comparing version 0.8.0 to 0.9.0

package.json

 {
   "name": "derequire",
-  "version": "0.8.0",
+  "version": "0.9.0",
   "description": "remove requires",
   "main": "index.js",
+  "bin": {
+    "derequire": "bin/cmd.js"
+  },
   "scripts": {
@@ -20,5 +23,6 @@ "test": "istanbul test ./node_modules/mocha/bin/_mocha test/test.js"
   "dependencies": {
-    "estraverse": "~1.5.0",
+    "concat-stream": "^1.4.6",
+    "esprima-fb": "^3001.1.0-dev-harmony-fb",
     "esrefactor": "~0.1.0",
-    "esprima-fb": "^3001.1.0-dev-harmony-fb"
+    "estraverse": "~1.5.0"
   },
@@ -25,0 +29,0 @@ "devDependencies": {

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

350515

increased by0.12%

Number of package files

11

increased by10%

Lines of code

10499

increased by0.11%

Worsened metrics

Dependency count

4

increased by33.33%

Number of low supply chain risk alerts

8

increased by14.29%

Dependency changes

• + Addedconcat-stream@^1.4.6

• + Addedbuffer-from@1.1.2(transitive)

• + Addedconcat-stream@1.6.2(transitive)

• + Addedcore-util-is@1.0.3(transitive)

• + Addedinherits@2.0.4(transitive)

• + Addedisarray@1.0.0(transitive)

• + Addedprocess-nextick-args@2.0.1(transitive)

• + Addedreadable-stream@2.3.8(transitive)

• + Addedsafe-buffer@5.1.2(transitive)

• + Addedstring_decoder@1.1.1(transitive)

• + Addedtypedarray@0.0.6(transitive)

• + Addedutil-deprecate@1.0.2(transitive)