ember - npm Package Compare versions

Comparing version 1.0.0-pre.m2 to 1.0.0

package.json

 {
   "name": "ember",
-  "summary": "Ember - JavaScript Application Framework",
-  "description": "Ember - JavaScript Application Framework",
-  "homepage": "http://github.com/emberjs/ember.js",
-  "author": "Charles Jolley",
-  "version": "v1.0.0-pre.m2",
-  "dependencies": {
-    "handlebars": "~> 1.0.0-beta.6",
-    "window": "git://github.com/charlesjolley/node-window.git#master",
-    "jquery": "~> 1.7.0",
-    "convoy": "~0.3"
+  "version": "1.0.0",
+  "description": "<p align=\"center\">   <a href=\"http://emberjs.com\"><img width=\"300\" src=\"http://emberjs.com/images/brand/ember_Ember-Light.png\"></a> </p>",
+  "main": "index.js",
+  "scripts": {
+    "postinstall": "node ./index.js"
   },
-  "main": "./ember.js",
   "repository": {
     "type": "git",
-    "url": "git://github.com/charlesjolley/node-ember.git"
-  }
-}
+    "url": "git+https://github.com/emberjs/ember.git"
+  },
+  "author": "",
+  "license": "MIT",
+  "bugs": {
+    "url": "https://github.com/emberjs/ember/issues"
+  },
+  "homepage": "https://github.com/emberjs/ember#readme"
+}

README.md

@@ -1,88 +0,18 @@
-# Ember for Node
+<p align="center">
+  <a href="http://emberjs.com"><img width="300" src="http://emberjs.com/images/brand/ember_Ember-Light.png"></a><br>
+  http://emberjs.com/
+</p>
 
-Ember.js is a framework for building ambitious client-side applications on the
-web. Now you can use the same Ember tools in node code and in node-based asset
-pipelines like [Convoy](http://github.com/charlesjolley/convoy).
 
-# Using This Package
+## Get Started
 
-Just add ember as a requirement to your package.json:
-
-```javascript
-"dependencies": {
-  ...
-  "ember": "~0.9"
-}
 ```
-
-In your code, you can load the entire Ember stack by just requiring the package.
-This will add Ember to the global namespace in your application.
-
-```javascript
-require('ember');
-
-MyApp = Ember.Application.create({
-  hi: function() { console.log('Hi! I'm an app!'); }
-});
+npm install -g ember-cli
 ```
 
-If you don't want to use the entire Ember stack, you can just require the 
-specific module that you want. For example, a lot of server side code just 
-needs States for statecharting:
 
-```javascript
-require('ember/states');
+## Node Modules:
 
-MyState = Ember.State.create({
-  
-});
-```
-
-# Using Ember with Convoy
-
-Building an Ember application in the browser is very easy when using Convoy.
-Just require ember in your main application file.
-
-```javascript
-// In some JS module included by convoy:
-require('ember'); // <- convoy will automatically pull in all of Ember.
-
-UserView = Ember.View.extend({
-  template: Ember.Handlebars.compile('{{firstName}} {{lastName}}')
-});
-```
-
-If you want to store your Handlebars templates in a separate file, Ember for
-Node has a HandlebarsCompiler that will precompile the templates for you. 
-Here is an example Convoy pipeline configuration:
-
-```javascript
-pipeline = convoy({
-  'app.js': {
-    packager: 'javascript',
-    compilers: {
-      '.hbr': require('ember/packager').HandlebarsCompiler
-    }
-  }
-});
-
-app = express.createServer();
-app.use(pipeline.middleware());
-```
-
-This will now make `.hbr` files available as modules. In your app code, you
-can load the template via a normal require:
-
-```javascript
-// user_view.js
-
-require('ember/views');
-
-UserView = Ember.View.extend({
-  template: require('./user_template') // template in user_template.hbr
-});
-```
-
-For a fully functioning example of an application, check out the 
-[examples](https://github.com/charlesjolley/node-ember/tree/master/examples) 
-folder.
+* [ember-source](https://www.npmjs.com/package/ember-source) – The Framework: [website](http://emberjs.com) | [github](https://github.com/emberjs/ember.js)
+* [ember-data](https://www.npmjs.com/package/ember-data) – The data library: [website](http://emberjs.com/api/data/) | [github](https://github.com/emberjs/data)
+* [ember-cli](https://www.npmjs.com/package/ember-cli) – The commandline tool: [website](http://ember-cli.com) | [github](https://github.com/ember-cli/ember-cli)

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Install scripts

Supply chain risk

Install scripts are run when the package is installed. The majority of malware in npm is hidden in install scripts.

Found 1 instance in 1 package

Major refactor

Supply chain risk

Package has recently undergone a major refactor. It may be unstable or indicate significant internal changes. Use caution when updating to versions that include significant changes.

Found 1 instance in 1 package

New author

Supply chain risk

A new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.

Found 1 instance in 1 package

Trivial Package

Supply chain risk

Packages less than 10 lines of code are easily copied into your own project and may not warrant the additional supply chain risk of an external dependency.

Found 1 instance in 1 package

No contributors or author data

Maintenance

Package does not specify a list of contributors or an author in package.json.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Git dependency

Supply chain risk

Contains a dependency which resolves to a remote git URL. Dependencies fetched from git URLs are not immutable and can be used to inject untrusted code or reduce the likelihood of a reproducible install.

Found 1 instance in 1 package

Manifest confusion

Supply chain risk

This package has inconsistent metadata. This could be malicious or caused by an error when publishing the package.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 1 instance in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

No bug tracker

Maintenance

Package does not have a linked bug tracker in package.json.

Found 1 instance in 1 package

No v1

Quality

Package is not semver >=1. This means it is not stable and does not support ^ ranges.

Found 1 instance in 1 package

Improved metrics

Dependency count

0

decreased by-100%

Number of low quality alerts

0

decreased by-100%

Number of low supply chain risk alerts

0

decreased by-100%

Worsened metrics

Total package byte prevSize

1763

decreased by-99.79%

Number of package files

3

decreased by-88.46%

Lines of code

10

decreased by-99.96%

Number of lines in readme file

19

decreased by-78.65%

Number of medium supply chain risk alerts

3

increased by200%

Dependency changes

• - Removedconvoy@~0.3

• - Removedhandlebars@~> 1.0.0-beta.6

• - Removedjquery@~> 1.7.0

• - Removedwindow@git://github.com/charlesjolley/node-window.git#master

• - Removedajv@6.12.6(transitive)

• - Removedamdefine@1.0.1(transitive)

• - Removedasn1@0.2.6(transitive)

• - Removedassert-plus@1.0.0(transitive)

• - Removedasync@0.1.220.2.10(transitive)

• - Removedasynckit@0.4.0(transitive)

• - Removedaws-sign2@0.7.0(transitive)

• - Removedaws4@1.13.2(transitive)

• - Removedbcrypt-pbkdf@1.0.2(transitive)

• - Removedbindings@1.5.0(transitive)

• - Removedcaseless@0.12.0(transitive)

• - Removedcoffee-script@1.3.3(transitive)

• - Removedcombined-stream@1.0.8(transitive)

• - Removedcommander@0.5.2(transitive)

• - Removedconnect@2.2.2(transitive)

• - Removedcontextify@0.1.15(transitive)

• - Removedconvoy@0.3.2(transitive)

• - Removedcore-util-is@1.0.2(transitive)

• - Removedcrc@0.1.0(transitive)

• - Removedcssom@0.2.5(transitive)

• - Removedcssstyle@4.1.0(transitive)

• - Removeddashdash@1.14.1(transitive)

• - Removeddebug@4.4.0(transitive)

• - Removeddelayed-stream@1.0.0(transitive)

• - Removedecc-jsbn@0.1.2(transitive)

• - Removedextend@3.0.2(transitive)

• - Removedextsprintf@1.3.0(transitive)

• - Removedfast-deep-equal@3.1.3(transitive)

• - Removedfast-json-stable-stringify@2.1.0(transitive)

• - Removedfile-uri-to-path@1.0.0(transitive)

• - Removedforever-agent@0.6.1(transitive)

• - Removedform-data@2.3.3(transitive)

• - Removedformidable@1.0.9(transitive)

• - Removedgetpass@0.1.7(transitive)

• - Removedglob@3.1.21(transitive)

• - Removedgraceful-fs@1.2.3(transitive)

• - Removedhandlebars@1.0.12(transitive)

• - Removedhar-schema@2.0.0(transitive)

• - Removedhar-validator@5.1.5(transitive)

• - Removedhtmlparser@1.7.6(transitive)

• - Removedhttp-signature@1.2.0(transitive)

• - Removedinherits@1.0.2(transitive)

• - Removedis-typedarray@1.0.0(transitive)

• - Removedisstream@0.1.2(transitive)

• - Removedjquery@1.7.3(transitive)

• - Removedjsbn@0.1.1(transitive)

• - Removedjsdom@0.2.19(transitive)

• - Removedjson-schema@0.4.0(transitive)

• - Removedjson-schema-traverse@0.4.1(transitive)

• - Removedjson-stringify-safe@5.0.1(transitive)

• - Removedjsprim@1.4.2(transitive)

• - Removedlocation@0.0.1(transitive)

• - Removedlru-cache@2.7.3(transitive)

• - Removedmime@1.2.111.2.4(transitive)

• - Removedmime-db@1.52.0(transitive)

• - Removedmime-types@2.1.35(transitive)

• - Removedminimatch@0.2.14(transitive)

• - Removedms@2.1.3(transitive)

• - Removednan@2.22.0(transitive)

• - Removednavigator@1.0.1(transitive)

• - Removedoauth-sign@0.9.0(transitive)

• - Removedoptimist@0.3.7(transitive)

• - Removedperformance-now@2.1.0(transitive)

• - Removedpsl@1.15.0(transitive)

• - Removedpunycode@2.3.1(transitive)

• - Removedqs@0.4.26.5.3(transitive)

• - Removedrequest@2.88.2(transitive)

• - Removedrrweb-cssom@0.7.1(transitive)

• - Removedsafe-buffer@5.2.1(transitive)

• - Removedsafer-buffer@2.1.2(transitive)

• - Removedsigmund@1.0.1(transitive)

• - Removedsource-map@0.1.43(transitive)

• - Removedsshpk@1.18.0(transitive)

• - Removedtough-cookie@2.5.0(transitive)

• - Removedtunnel-agent@0.6.0(transitive)

• - Removedtweetnacl@0.14.5(transitive)

• - Removeduglify-js@1.2.62.3.6(transitive)

• - Removeduri-js@4.4.1(transitive)

• - Removeduuid@3.4.0(transitive)

• - Removedverror@1.10.0(transitive)

• - Removedwordwrap@0.0.3(transitive)

• - Removedxmlhttprequest@1.4.2(transitive)