dtslint - npm Package Compare versions

Comparing version 0.4.2 to 0.4.3

dt.json

@@ -8,3 +8,3 @@ {
 		"no-self-import": true,
-		//TODO: "no-outside-dependencies": true,
+		"no-outside-dependencies": true,
 
@@ -11,0 +11,0 @@ "no-redundant-jsdoc": false,

dtslint.json

@@ -123,4 +123,6 @@ {
         "unnecessary-constructor": false,
+        "no-angle-bracket-type-assertion": false,
+        "no-default-import": false,
         "callable-types": false
     }
 }

package.json

 {
   "name": "dtslint",
-  "version": "0.4.2",
+  "version": "0.4.3",
   "description": "Runs tests on TypeScript definition files",
@@ -13,2 +13,3 @@ "files": [
   "contributors": [
+    "Nathan Shively-Sanders <[e-mail]> (https://github.com/sandersn)",
     "Andy Hanson <[e-mail]> (https://github.com/andy-ms)",
@@ -25,7 +26,10 @@ "Dan Vanderkam <[e-mail]> (https://github.com/danvk)"
     "lint": "tslint --project tsconfig.json --format stylish",
-    "test": "node test/test.js"
+    "test": "node test/test.js",
+    "push-production": "npm run build && git checkout production && git merge master && npm run build && git add bin/* && git commit -m 'Update bin/' && git push -u origin production"
   },
   "dependencies": {
-    "definitelytyped-header-parser": "github:Microsoft/definitelytyped-header-parser#production",
+    "definitelytyped-header-parser": "^1.0.1",
+    "dts-critic": "^1.0.1",
     "fs-extra": "^6.0.1",
+    "request": "^2.88.0",
     "strip-json-comments": "^2.0.1",
@@ -32,0 +36,0 @@ "tslint": "^5.12.0",

README.md

@@ -142,10 +142,6 @@ `dtslint` tests a TypeScript declaration file for style and correctness.
 ```sh
-git checkout production
-git merge master
-npm run build
-git add --all
-git commit -m "Update bin/"
-git push
+npm run push-production
 ```
 
+This script merges changes from master into `production` and updates the `bin/` directory.
 The `production` branch is a dependency of [DefinitelyTyped](https://github.com/DefinitelyTyped/DefinitelyTyped) and [types-publisher](https://github.com/Microsoft/types-publisher).
@@ -160,6 +156,11 @@
 
-```
-
 ## Code of Conduct
 
 This project has adopted the [Microsoft Open Source Code of Conduct](https://opensource.microsoft.com/codeofconduct/). For more information see the [Code of Conduct FAQ](https://opensource.microsoft.com/codeofconduct/faq/) or contact [[e-mail]](mailto:[e-mail]) with any additional questions or comments.
+
+## FAQ
+I'm getting an error about a missing typescript install.
+```
+Error: Cannot find module '/node_modules/dtslint/typescript-installs/3.1/node_modules/typescript`
+```
+Package lock files such as `yarn.lock` and `package-lock.json` may cause this issue because of our github dependency on `"definitelytyped-header-parser": "github:Microsoft/definitelytyped-header-parser#production"`, which contains the list of typescript versions to install. To fix this, try deleting your lock file and re-installing.

New alerts

Major refactor

Supply chain risk

Package has recently undergone a major refactor. It may be unstable or indicate significant internal changes. Use caution when updating to versions that include significant changes.

Found 1 instance in 1 package

New author

Supply chain risk

A new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.

Found 1 instance in 1 package

Fixed alerts

GitHub dependency

Supply chain risk

Contains a dependency which resolves to a GitHub URL. Dependencies fetched from GitHub specifiers are not immutable can be used to inject untrusted code or reduce the likelihood of a reproducible install.

Found 1 instance in 1 package

Shell access

Supply chain risk

This module accesses the system shell. Accessing the system shell increases the risk of executing arbitrary code.

Found 1 instance in 1 package

Dynamic require

Supply chain risk

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

Found 1 instance in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 2 instances in 1 package

Improved metrics

Number of lines in readme file

165

increased by0.61%

Number of high supply chain risk alerts

0

decreased by-100%

Number of low supply chain risk alerts

0

decreased by-100%

Worsened metrics

Total package byte prevSize

13019

decreased by-92.27%

Dependency count

7

increased by40%

Number of package files

5

decreased by-91.8%

Lines of code

136

decreased by-94.11%

Number of medium supply chain risk alerts

2

increased by100%

Dependency changes

• + Addeddts-critic@^1.0.1

• + Addedrequest@^2.88.0

• + Added@types/parsimmon@1.10.9(transitive)

• + Addedajv@6.12.6(transitive)

• + Addedansi-regex@2.1.13.0.1(transitive)

• + Addedasn1@0.2.6(transitive)

• + Addedassert-plus@1.0.0(transitive)

• + Addedasynckit@0.4.0(transitive)

• + Addedaws-sign2@0.7.0(transitive)

• + Addedaws4@1.13.2(transitive)

• + Addedbcrypt-pbkdf@1.0.2(transitive)

• + Addedcamelcase@5.3.1(transitive)

• + Addedcaseless@0.12.0(transitive)

• + Addedcliui@4.1.0(transitive)

• + Addedcode-point-at@1.1.0(transitive)

• + Addedcombined-stream@1.0.8(transitive)

• + Addedcore-util-is@1.0.2(transitive)

• + Addedcross-spawn@6.0.6(transitive)

• + Addeddashdash@1.14.1(transitive)

• + Addeddecamelize@1.2.0(transitive)

• + Addeddefinitelytyped-header-parser@1.2.0(transitive)

• + Addeddelayed-stream@1.0.0(transitive)

• + Addeddownload-file-sync@1.0.4(transitive)

• + Addeddts-critic@1.2.0(transitive)

• + Addedecc-jsbn@0.1.2(transitive)

• + Addedend-of-stream@1.4.4(transitive)

• + Addedexeca@1.0.0(transitive)

• + Addedextend@3.0.2(transitive)

• + Addedextsprintf@1.3.0(transitive)

• + Addedfast-deep-equal@3.1.3(transitive)

• + Addedfast-json-stable-stringify@2.1.0(transitive)

• + Addedfind-up@3.0.0(transitive)

• + Addedforever-agent@0.6.1(transitive)

• + Addedform-data@2.3.3(transitive)

• + Addedget-caller-file@1.0.3(transitive)

• + Addedget-stream@4.1.0(transitive)

• + Addedgetpass@0.1.7(transitive)

• + Addedhar-schema@2.0.0(transitive)

• + Addedhar-validator@5.1.5(transitive)

• + Addedhttp-signature@1.2.0(transitive)

• + Addedinvert-kv@2.0.0(transitive)

• + Addedis-fullwidth-code-point@1.0.02.0.0(transitive)

• + Addedis-stream@1.1.0(transitive)

• + Addedis-typedarray@1.0.0(transitive)

• + Addedisexe@2.0.0(transitive)

• + Addedisstream@0.1.2(transitive)

• + Addedjsbn@0.1.1(transitive)

• + Addedjson-schema@0.4.0(transitive)

• + Addedjson-schema-traverse@0.4.1(transitive)

• + Addedjson-stringify-safe@5.0.1(transitive)

• + Addedjsprim@1.4.2(transitive)

• + Addedlcid@2.0.0(transitive)

• + Addedlocate-path@3.0.0(transitive)

• + Addedmap-age-cleaner@0.1.3(transitive)

• + Addedmem@4.3.0(transitive)

• + Addedmime-db@1.52.0(transitive)

• + Addedmime-types@2.1.35(transitive)

• + Addedmimic-fn@2.1.0(transitive)

• + Addednice-try@1.0.5(transitive)

• + Addednpm-run-path@2.0.2(transitive)

• + Addednumber-is-nan@1.0.1(transitive)

• + Addedoauth-sign@0.9.0(transitive)

• + Addedos-locale@3.1.0(transitive)

• + Addedp-defer@1.0.0(transitive)

• + Addedp-finally@1.0.0(transitive)

• + Addedp-is-promise@2.1.0(transitive)

• + Addedp-limit@2.3.0(transitive)

• + Addedp-locate@3.0.0(transitive)

• + Addedp-try@2.2.0(transitive)

• + Addedparsimmon@1.18.1(transitive)

• + Addedpath-exists@3.0.0(transitive)

• + Addedpath-key@2.0.1(transitive)

• + Addedperformance-now@2.1.0(transitive)

• + Addedpsl@1.15.0(transitive)

• + Addedpump@3.0.2(transitive)

• + Addedpunycode@2.3.1(transitive)

• + Addedqs@6.5.3(transitive)

• + Addedrequest@2.88.2(transitive)

• + Addedrequire-directory@2.1.1(transitive)

• + Addedrequire-main-filename@1.0.1(transitive)

• + Addedsafe-buffer@5.2.1(transitive)

• + Addedsafer-buffer@2.1.2(transitive)

• + Addedset-blocking@2.0.0(transitive)

• + Addedshebang-command@1.2.0(transitive)

• + Addedshebang-regex@1.0.0(transitive)

• + Addedsignal-exit@3.0.7(transitive)

• + Addedsshpk@1.18.0(transitive)

• + Addedstring-width@1.0.22.1.1(transitive)

• + Addedstrip-ansi@3.0.14.0.0(transitive)

• + Addedstrip-eof@1.0.0(transitive)

• + Addedtough-cookie@2.5.0(transitive)

• + Addedtunnel-agent@0.6.0(transitive)

• + Addedtweetnacl@0.14.5(transitive)

• + Addeduri-js@4.4.1(transitive)

• + Addeduuid@3.4.0(transitive)

• + Addedverror@1.10.0(transitive)

• + Addedwhich@1.3.1(transitive)

• + Addedwhich-module@2.0.1(transitive)

• + Addedwrap-ansi@2.1.0(transitive)

• + Addedy18n@4.0.3(transitive)

• + Addedyargs@12.0.5(transitive)

• + Addedyargs-parser@11.1.1(transitive)

• Updateddefinitelytyped-header-parser@^1.0.1