destiny-client - npm Package Compare versions

Comparing version 0.4.0 to 0.4.1

build/main.js

@@ -9,4 +9,2 @@ 'use strict';
 
-require('babel/polyfill');
-
 var _url = require('url');
@@ -30,2 +28,4 @@
 
+require('es6-promise').polyfill();
+
 var HOST = 'https://www.bungie.net/platform/Destiny/'; // the is address to Bungie's API
@@ -32,0 +32,0 @@

package.json

 {
   "name": "destiny-client",
-  "version": "0.4.0",
+  "version": "0.4.1",
   "description": "A client for Bungie's Destiny API.",
@@ -26,7 +26,10 @@ "main": "index.js",
     "eslint": "^0.21.2",
-    "isomorphic-fetch": "^2.1.0",
-    "lodash": "^3.9.1",
     "uglify-loader": "^1.2.0",
     "webpack": "^1.9.9"
+  },
+  "dependencies": {
+    "es6-promise": "^2.1.1",
+    "isomorphic-fetch": "^2.1.0",
+    "lodash": "^3.9.1"
   }
 }

src/main.js

 'use strict';
 
-import 'babel/polyfill';
+require('es6-promise').polyfill();
 import url from 'url';
@@ -5,0 +5,0 @@ import _ from 'lodash';

webpack.config.js

@@ -13,11 +13,11 @@ var path = require('path');
     plugins: [
-        new webpack.optimize.UglifyJsPlugin({
-            compress: {
-                warnings: false
-            },
-            mangle: {
-                except: ['exports', 'require', 'DestinyError']
-            }
-        })
+        // new webpack.optimize.UglifyJsPlugin({
+        //     compress: {
+        //         warnings: false
+        //     },
+        //     mangle: {
+        //         except: ['exports', 'require']
+        //     }
+        // })
     ]
 };

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Major refactor

Supply chain risk

Package has recently undergone a major refactor. It may be unstable or indicate significant internal changes. Use caution when updating to versions that include significant changes.

Found 1 instance in 1 package

Uses eval

Supply chain risk

Package uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Found 1 instance in 1 package

Dynamic require

Supply chain risk

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Major refactor

Supply chain risk

Package has recently undergone a major refactor. It may be unstable or indicate significant internal changes. Use caution when updating to versions that include significant changes.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

545493

increased by280.51%

Dev dependency count

5

decreased by-28.57%

Lines of code

14461

increased by2004.95%

Worsened metrics

Dependency count

3

increased byInfinity%

Number of low supply chain risk alerts

2

increased byInfinity%

Number of medium supply chain risk alerts

6

increased by50%

Dependency changes

• + Addedes6-promise@^2.1.1

• + Addedisomorphic-fetch@^2.1.0

• + Addedlodash@^3.9.1

• + Addedencoding@0.1.13(transitive)

• + Addedes6-promise@2.3.0(transitive)

• + Addediconv-lite@0.6.3(transitive)

• + Addedis-stream@1.1.0(transitive)

• + Addedisomorphic-fetch@2.2.1(transitive)

• + Addedlodash@3.10.1(transitive)

• + Addednode-fetch@1.7.3(transitive)

• + Addedsafer-buffer@2.1.2(transitive)

• + Addedwhatwg-fetch@3.6.20(transitive)