dispensary - npm Package Compare versions

Comparing version 0.50.0 to 0.51.2

package.json

 {
   "name": "dispensary",
-  "version": "0.50.0",
+  "version": "0.51.2",
   "description": "SHA-256 Hashes of popular JS libraries, used by Mozilla's Add-ons Linter",
@@ -37,35 +37,36 @@ "main": "dist/dispensary.js",
   "devDependencies": {
-    "@babel/core": "~7.8.0",
+    "@babel/core": "~7.9.0",
     "@babel/plugin-proposal-class-properties": "~7.8.0",
-    "@babel/plugin-transform-modules-commonjs": "~7.8.0",
-    "@babel/preset-env": "~7.8.0",
-    "babel-eslint": "~10.0.3",
-    "babel-loader": "~8.0.0",
-    "codecov": "3.6.1",
+    "@babel/plugin-transform-modules-commonjs": "~7.9.0",
+    "@babel/preset-env": "~7.9.0",
+    "babel-eslint": "~10.1.0",
+    "babel-loader": "~8.1.0",
+    "codecov": "3.6.5",
     "eslint": "~6.8.0",
-    "eslint-config-amo": "1.32.0",
-    "eslint-config-prettier": "6.9.0",
+    "eslint-config-amo": "1.34.0",
+    "eslint-config-prettier": "6.10.1",
     "eslint-plugin-async-await": "0.0.0",
-    "eslint-plugin-jest": "23.6.0",
+    "eslint-plugin-jest": "23.8.2",
     "eslint-plugin-prettier": "3.1.2",
     "eslint-plugin-promise": "4.2.1",
-    "jest": "24.9.0",
+    "jest": "25.2.4",
     "jest-raw-loader": "1.0.1",
-    "prettier": "1.19.1",
+    "prettier": "2.0.2",
     "pretty-quick": "2.0.1",
     "raw-loader": "~4.0.0",
-    "rimraf": "3.0.0",
-    "sinon": "~8.0.0",
-    "webpack": "~4.41.0",
+    "replace-in-file": "5.0.2",
+    "rimraf": "3.0.2",
+    "sinon": "~9.0.0",
+    "webpack": "~4.42.0",
     "webpack-cli": "^3.3.10"
   },
   "dependencies": {
-    "async": "~3.1.0",
+    "async": "~3.2.0",
     "natural-compare-lite": "~1.4.0",
-    "pino": "~5.16.0",
+    "pino": "~6.0.0",
     "request": "~2.88.0",
     "sha.js": "~2.4.4",
     "source-map-support": "~0.5.4",
-    "yargs": "~15.1.0"
+    "yargs": "~15.3.0"
   }
 }

README.md

@@ -6,1 +6,81 @@ [![Build Status](https://travis-ci.org/mozilla/dispensary.svg?branch=master)](https://travis-ci.org/mozilla/dispensary) [![codecov](https://codecov.io/gh/mozilla/dispensary/branch/master/graph/badge.svg)](https://codecov.io/gh/mozilla/dispensary) [![Dependency Status](https://david-dm.org/mozilla/dispensary.svg)](https://david-dm.org/mozilla/dispensary) [![devDependency Status](https://david-dm.org/mozilla/dispensary/dev-status.svg)](https://david-dm.org/mozilla/dispensary#info=devDependencies) [![npm version](https://badge.fury.io/js/dispensary.svg)](https://badge.fury.io/js/dispensary)
 The dispensary collects and offers hashes of popular JavaScript libraries, mainly for the [Mozilla's addons-linter](https://github.com/mozilla/addons-linter).
+
+## Libraries updates
+
+This is the (manual) process to update libraries in dispensary:
+
+1. Open `src/libraries.json`
+2. Open the release pages of each library. Here is a list:
+
+<!--RELEASE_PAGES_START-->
+
+- https://github.com/angular/angular.js/releases
+- https://github.com/jashkenas/backbone/releases
+- https://github.com/twbs/bootstrap/releases
+- https://download.dojotoolkit.org/
+- https://github.com/cure53/DOMPurify/releases
+- https://github.com/jquery/jquery/releases
+- https://github.com/jquery/jquery-ui/releases
+- https://github.com/moment/moment/releases
+- https://github.com/mootools/mootools-core/releases
+- http://prototypejs.org/
+- https://github.com/facebook/react/releases
+- https://github.com/jashkenas/underscore/releases
+- https://github.com/mozilla/webextension-polyfill/releases
+
+<!--RELEASE_PAGES_END-->
+
+3. On each page, check whether there are newer release versions than what is in `src/libraries.json`. Note that some libraries, like react, support several versions, so we need to check each "branch".
+4. For major upgrades, take a quick look at the code changes
+5. Add new versions to `src/libraries.json`
+6. Run `npm run update`
+7. Commit and push (Make sure to include `src/libraries.json`and `src/hashes.txt`)
+8. Tag and release
+
+## Development commands
+
+Here are some commands you can run:
+
+### `npm run build`
+
+This command builds the project.
+
+### `npm run clean`
+
+This command removes the build artifacts.
+
+### `npm run eslint`
+
+This command runs [eslint][] (JavaScript linter).
+
+### `npm run prettier`
+
+This command runs [pretty-quick][] to automatically compare and format modified source files against the master branch.
+
+### `npm run prettier-full`
+
+This command runs [Prettier][] to automatically format the entire codebase.
+
+### `npm run prettier-ci`
+
+This command runs [Prettier][] and fail if some code has been changed without being formatted.
+
+### `npm run test`
+
+This command builds the project and then runs the test suite (in watch mode).
+
+### `npm run test-coverage`
+
+This command builds the project, runs the test suite and then reports code coverage (codecov).
+
+### `npm run test-ci`
+
+This command runs all checks and is only useful in a CI context.
+
+### `bin/build-doc`
+
+This command updates the list of release pages in the `README.md` file based on the `src/libraries.json` file.
+
+[eslint]: https://eslint.org/
+[prettier]: https://prettier.io/
+[pretty-quick]: https://www.npmjs.com/package/pretty-quick

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

263986

increased by4.93%

Number of package files

14

increased by7.69%

Lines of code

462

increased by4.05%

Number of lines in readme file

86

increased by1333.33%

Worsened metrics

Dev dependency count

24

increased by4.35%

Dependency changes

• + Addedasync@3.2.6(transitive)

• + Addedpino@6.0.0(transitive)

• + Addedquick-format-unescaped@4.0.4(transitive)

• + Addedsonic-boom@1.4.1(transitive)

• + Addedyargs@15.3.1(transitive)

• + Addedyargs-parser@18.1.3(transitive)

• - Removedasync@3.1.1(transitive)

• - Removedpino@5.16.0(transitive)

• - Removedquick-format-unescaped@3.0.3(transitive)

• - Removedsonic-boom@0.7.7(transitive)

• - Removedyargs@15.1.0(transitive)

• - Removedyargs-parser@16.1.0(transitive)

• Updatedasync@~3.2.0

• Updatedpino@~6.0.0

• Updatedyargs@~15.3.0