figmagic - npm Package Compare versions

Comparing version 4.3.2 to 4.3.3

package.json

 {
   "name": "figmagic",
-  "version": "4.3.2",
+  "version": "4.3.3",
   "description": "Figmagic is the missing piece between DevOps and design: Generate design tokens, export graphics, and extract design token-driven React components from your Figma documents.",
@@ -101,6 +101,3 @@ "homepage": "https://www.figmagic.com",
   },
-  "dependencies": {
-    "dotenv": "10"
-  },
   "snyk": true
 }

README.md

@@ -20,3 +20,3 @@ ![Figmagic cover art](images/cover.png)
 
-Previous versions in the 4.0 series have been using [`trash`](https://github.com/sindresorhus/trash) to handle files that need to be replaced. In `4.3.0` this is no longer the case, and there is now instead a configuration choice you can make to adapt to your needs.
+Previous versions in the 4.0 series have been using [`trash`](https://github.com/sindresorhus/trash) to handle files that need to be replaced. In `4.3.0` this is no longer the case.
 
@@ -84,3 +84,3 @@ Any deleted files are now permanently destroyed by the Node native `fs` module.
 - Figmagic is designer-driven, since Figma is seen as the source of truth
-- Figmagic is automatable and very lightweight (~40kb compressed), with only a single external dependency (`dotenv`)
+- Figmagic is automatable and very lightweight (~45kb compressed), with no external dependencies
 - Figmagic is developer-friendly and makes very few assumptions on your use and/or setup and supports a range of output formats plus that it's extensible through custom templates if you need something completely different
@@ -291,3 +291,3 @@ - Figmagic is open-sourced under the MIT license and has a long track record of very short implementation cycles for new features/fixes
 1. User-provided configuration from `figmagic.json`/`.figmagicrc` file
-2. Environment variables (also loaded from `.env` file using `dotenv`)
+2. Environment variables (also loaded from `.env` file)
 3. Command-line arguments and flags
@@ -294,0 +294,0 @@

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 1 instance in 1 package

Improved metrics

Dependency count

0

decreased by-100%

Worsened metrics

Total package byte prevSize

155529

decreased by-1.4%

Dependency changes

• - Removeddotenv@10

• - Removeddotenv@10.0.0(transitive)