editorjs-toggle-block - npm Package Compare versions

Comparing version 0.2.5 to 0.2.6

CHANGELOG.md

 # Changelog
 
+## 0.2.6 (05.09.2022)
+
+* Remediate token permission, missing harden runner, and unpinned dependencies security issues in Github Actions.
+* Update dependencies.
+* Add CodeQL analysis workflow.
+* Add OpenSSF Best Practices & OpenSSF Scorecard badges in README.
+
 ## 0.2.5 (09.08.2022)
@@ -4,0 +11,0 @@

package.json

 {
   "name": "editorjs-toggle-block",
-  "version": "0.2.5",
+  "version": "0.2.6",
   "description": "Toogle block tool for Editor.js",
@@ -34,19 +34,20 @@ "main": "./dist/bundle.js",
   "devDependencies": {
-    "@babel/core": "^7.16.7",
-    "@babel/preset-env": "^7.16.8",
-    "@testing-library/jest-dom": "^5.16.1",
-    "babel-jest": "^27.4.6",
-    "babel-loader": "^8.2.3",
-    "css-loader": "^6.5.1",
-    "eslint": "^8.7.0",
+    "@babel/core": "^7.19.0",
+    "@babel/preset-env": "^7.19.0",
+    "@testing-library/jest-dom": "^5.16.5",
+    "babel-jest": "^29.0.2",
+    "babel-loader": "^8.2.5",
+    "css-loader": "^6.7.1",
+    "eslint": "^8.23.0",
     "eslint-config-airbnb-base": "^15.0.0",
-    "eslint-plugin-import": "^2.25.4",
-    "eslint-plugin-jest": "^25.7.0",
-    "husky": "^7.0.4",
-    "jest": "^27.4.7",
+    "eslint-plugin-import": "^2.26.0",
+    "eslint-plugin-jest": "^27.0.1",
+    "husky": "^8.0.1",
+    "jest": "^29.0.2",
+    "jest-environment-jsdom": "^29.0.2",
     "style-loader": "^3.3.1",
     "svg-inline-loader": "^0.8.2",
-    "typescript": "^4.7.4",
-    "webpack": "^5.66.0",
-    "webpack-cli": "^4.9.1"
+    "typescript": "^4.8.2",
+    "webpack": "^5.74.0",
+    "webpack-cli": "^4.10.0"
   },
@@ -61,7 +62,10 @@ "jest": {
       "^.+\\.(css|svg)$": "<rootDir>/test/config/assetsTransform.js"
-    }
+    },
+    "transformIgnorePatterns": [
+      "/node_modules/(?!uuid)"
+    ]
   },
   "dependencies": {
-    "uuid": "^8.3.2"
+    "uuid": "^9.0.0"
   }
 }

README.md

 # EditorJS Toggle Block
+[![CII Best Practices](https://bestpractices.coreinfrastructure.org/projects/6454/badge)](https://bestpractices.coreinfrastructure.org/projects/6454)
+[![OpenSSF Scorecard](https://api.securityscorecards.dev/projects/github.com/kommitters/editorjs-toggle-block/badge)](https://api.securityscorecards.dev/projects/github.com/kommitters/editorjs-toggle-block)
 
@@ -21,2 +23,12 @@ Toggle block tool for [Editor.js](https://editorjs.io/)
 
+### Load from CDN
+
+You can load a specific version of the package from [jsDelivr CDN](https://www.jsdelivr.com/package/npm/editorjs-toggle-block).
+
+Require this script on a page with Editor.js.
+
+```html
+<script src="https://cdn.jsdelivr.net/npm/editorjs-toggle-block"></script>
+```
+
 ## Usage
@@ -23,0 +35,0 @@

test/config/assetsTransform.js

 module.exports = {
   process() {
-    return 'module.exports = {};';
+    return { code: 'module.exports = {};' };
   },
@@ -5,0 +5,0 @@ getCacheKey() {

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

1214071

increased by0.53%

Number of package files

32

increased by3.23%

Number of lines in readme file

100

increased by13.64%

Worsened metrics

Dev dependency count

18

increased by5.88%

Dependency changes

• + Addeduuid@9.0.1(transitive)

• - Removeduuid@8.3.2(transitive)

• Updateduuid@^9.0.0