eosjs-api - npm Package Compare versions

Comparing version 3.0.2 to 3.0.3

lib/testnet.js

 'use strict';
 
 var apiGen = require('./apigen');
+var isBrowser = require('is-browser');
 
@@ -12,4 +13,7 @@ module.exports = Testnet;
 
-var configDefaults = { httpEndpoint: 'http://t1readonly.eos.io'
+// Always use SSL unless a browser protocol is 'http'
+var protocol = isBrowser && location.protocol === 'http:' ? 'http' : 'https';
 
+var configDefaults = { httpEndpoint: protocol + '://t1readonly.eos.io'
+
   /**
@@ -16,0 +20,0 @@ @arg {object} config

package.json

 {
   "name": "eosjs-api",
-  "version": "3.0.2",
+  "version": "3.0.3",
   "description": "Application programming interface to EOS blockchain nodes.",
@@ -8,7 +8,10 @@ "main": "lib/index.js",
     "test": "mocha src/**/*.test.js",
+    "test_lib": "mocha --use_strict lib/*.test.js",
     "coverage": "istanbul cover _mocha -- -R spec src/**/*.test.js",
     "coveralls": "npm run coverage && cat ./coverage/lcov.info | ./node_modules/.bin/coveralls",
-    "build": "node_modules/babel-cli/bin/babel.js src --out-dir lib",
-    "prepublish": "npm run build && npm run docs",
-    "docs": "jsdoc2md src/exported-helpers.js src/process-args.js > docs/index.md"
+    "build": "babel src --out-dir lib",
+    "build_browser": "npm run build && mkdir -p dist && browserify -o dist/eos-api.js -s EosApi lib/index.js",
+    "build_browser_test": "npm run build && mkdir -p dist && browserify -o dist/test.js lib/*.test.js",
+    "docs": "jsdoc2md src/exported-helpers.js src/process-args.js > docs/index.md",
+    "prepublishOnly": "npm run build_browser && npm run test_lib && npm run docs"
   },
@@ -37,2 +40,3 @@ "repository": {
     "istanbul": "^0.4.5",
+    "jsdoc-to-markdown": "^4.0.1",
     "mocha": "^3.4.2"
@@ -43,2 +47,3 @@ },
     "eosjs-json": "^2.0.3",
+    "is-browser": "^2.0.1",
     "isomorphic-fetch": "^2.2.1"
@@ -45,0 +50,0 @@ },

New alerts

Major refactor

Supply chain risk

Package has recently undergone a major refactor. It may be unstable or indicate significant internal changes. Use caution when updating to versions that include significant changes.

Found 1 instance in 1 package

Dynamic require

Supply chain risk

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 2 instances in 1 package

Improved metrics

Total package byte prevSize

197504

increased by783.17%

Number of package files

18

increased by38.46%

Lines of code

4484

increased by774.07%

Worsened metrics

Dependency count

4

increased by33.33%

Dev dependency count

8

increased by14.29%

Number of low supply chain risk alerts

8

increased by700%

Number of medium supply chain risk alerts

4

increased by300%

Dependency changes

• + Addedis-browser@^2.0.1

• + Addedis-browser@2.1.0(transitive)