express-hbs - npm Package Compare versions

Comparing version 2.3.4 to 2.3.5

package.json

 {
   "name": "express-hbs",
-  "version": "2.3.4",
+  "version": "2.3.5",
   "description": "Express handlebars template engine complete with multiple layouts, partials and blocks.",
@@ -32,20 +32,20 @@ "keywords": [
   "devDependencies": {
-    "cookie-parser": "1.4.5",
-    "eslint": "7.5.0",
-    "express": "4.17.1",
-    "i18n": "0.10.0",
-    "mocha": "8.0.1",
-    "nyc": "15.1.0",
-    "rewire": "5.0.0",
-    "supertest": "4.0.2"
+    "cookie-parser": "^1.4.5",
+    "eslint": "^7.24.0",
+    "express": "^4.17.1",
+    "i18n": "^0.13.2",
+    "mocha": "^8.3.2",
+    "nyc": "^15.1.0",
+    "rewire": "^5.0.0",
+    "supertest": "^6.1.3"
   },
   "dependencies": {
     "bluebird": "^3.5.3",
-    "handlebars": "4.7.6",
-    "lodash": "4.17.19",
-    "readdirp": "3.4.0"
+    "handlebars": "^4.7.7",
+    "lodash": "^4.17.21",
+    "readdirp": "^3.6.0"
   },
   "optionalDependencies": {
-    "js-beautify": "1.11.0"
+    "js-beautify": "^1.13.11"
   }
 }

README.md

@@ -300,2 +300,2 @@ # express-hbs
 
-Copyright (c) 2012-2020 Barc, Inc., Ghost Foundation - Released under the [MIT license](LICENSE).
+Copyright (c) 2012-2021 Barc, Inc., Ghost Foundation - Released under the [MIT license](LICENSE).

renovate.json

 {
   "extends": [
-    "@tryghost:quietJS"
+    "@tryghost:quietJS",
+    "@tryghost:automergeDevDependencies"
   ]
 }

New alerts

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 1 instance in 1 package

Fixed alerts

New author

Supply chain risk

A new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

85185

increased by0.85%

Number of package files

116

increased by0.87%

Lines of code

2097

increased by0.05%

Number of medium supply chain risk alerts

0

decreased by-100%

Worsened metrics

Number of low supply chain risk alerts

15

increased by36.36%

Dependency changes

• + Added@isaacs/cliui@8.0.2(transitive)

• + Added@one-ini/wasm@0.1.1(transitive)

• + Added@pkgjs/parseargs@0.11.0(transitive)

• + Addedabbrev@2.0.0(transitive)

• + Addedansi-regex@5.0.16.0.1(transitive)

• + Addedansi-styles@4.3.06.2.1(transitive)

• + Addedbrace-expansion@2.0.1(transitive)

• + Addedcolor-convert@2.0.1(transitive)

• + Addedcolor-name@1.1.4(transitive)

• + Addedcommander@10.0.1(transitive)

• + Addedcross-spawn@7.0.3(transitive)

• + Addedeastasianwidth@0.2.0(transitive)

• + Addededitorconfig@1.0.4(transitive)

• + Addedemoji-regex@8.0.09.2.2(transitive)

• + Addedforeground-child@3.2.0(transitive)

• + Addedglob@10.4.1(transitive)

• + Addedhandlebars@4.7.8(transitive)

• + Addedis-fullwidth-code-point@3.0.0(transitive)

• + Addedisexe@2.0.0(transitive)

• + Addedjackspeak@3.4.0(transitive)

• + Addedjs-beautify@1.15.1(transitive)

• + Addedjs-cookie@3.0.5(transitive)

• + Addedlodash@4.17.21(transitive)

• + Addedlru-cache@10.2.2(transitive)

• + Addedminimatch@9.0.19.0.4(transitive)

• + Addedminipass@7.1.2(transitive)

• + Addednopt@7.2.1(transitive)

• + Addedpath-key@3.1.1(transitive)

• + Addedpath-scurry@1.11.1(transitive)

• + Addedreaddirp@3.6.0(transitive)

• + Addedsemver@7.6.2(transitive)

• + Addedshebang-command@2.0.0(transitive)

• + Addedshebang-regex@3.0.0(transitive)

• + Addedsignal-exit@4.1.0(transitive)

• + Addedstring-width@4.2.35.1.2(transitive)

• + Addedstrip-ansi@6.0.17.1.0(transitive)

• + Addedwhich@2.0.2(transitive)

• + Addedwrap-ansi@7.0.08.1.0(transitive)

• - Removedabbrev@1.1.1(transitive)

• - Removedbrace-expansion@1.1.11(transitive)

• - Removedcommander@2.20.3(transitive)

• - Removedconcat-map@0.0.1(transitive)

• - Removededitorconfig@0.15.3(transitive)

• - Removedfs.realpath@1.0.0(transitive)

• - Removedglob@7.2.3(transitive)

• - Removedhandlebars@4.7.6(transitive)

• - Removedinflight@1.0.6(transitive)

• - Removedinherits@2.0.4(transitive)

• - Removedjs-beautify@1.11.0(transitive)

• - Removedlodash@4.17.19(transitive)

• - Removedlru-cache@4.1.5(transitive)

• - Removedminimatch@3.1.2(transitive)

• - Removedmkdirp@1.0.4(transitive)

• - Removednopt@4.0.3(transitive)

• - Removedonce@1.4.0(transitive)

• - Removedos-homedir@1.0.2(transitive)

• - Removedos-tmpdir@1.0.2(transitive)

• - Removedosenv@0.1.5(transitive)

• - Removedpath-is-absolute@1.0.1(transitive)

• - Removedpseudomap@1.0.2(transitive)

• - Removedreaddirp@3.4.0(transitive)

• - Removedsemver@5.7.2(transitive)

• - Removedsigmund@1.0.1(transitive)

• - Removedwrappy@1.0.2(transitive)

• - Removedyallist@2.1.2(transitive)

• Updatedhandlebars@^4.7.7

• Updatedlodash@^4.17.21

• Updatedreaddirp@^3.6.0