flat - npm Package Compare versions

Comparing version 4.0.0 to 4.1.0

package.json

 {
   "name": "flat",
-  "version": "4.0.0",
+  "version": "4.1.0",
   "main": "index.js",
+  "bin": "cli.js",
   "scripts": {
@@ -11,4 +12,4 @@ "test": "mocha -u tdd --reporter spec && standard index.js test/index.js"
   "devDependencies": {
-    "mocha": "~3.4.2",
-    "standard": "^10.0.2"
+    "mocha": "~5.2.0",
+    "standard": "^11.0.1"
   },
@@ -19,3 +20,3 @@ "directories": {
   "dependencies": {
-    "is-buffer": "~1.1.5"
+    "is-buffer": "~2.0.3"
   },
@@ -22,0 +23,0 @@ "repository": {

README.md

@@ -161,1 +161,28 @@ # flat [![Build Status](https://secure.travis-ci.org/hughsk/flat.png?branch=master)](http://travis-ci.org/hughsk/flat)
 ```
+
+## Command Line Usage
+
+`flat` is also available as a command line tool. You can run it with 
+[`npx`](https://ghub.io/npx):
+
+```sh
+npx flat foo.json
+```
+
+Or install the `flat` command globally:
+ 
+```sh
+npm i -g flat && flat foo.json
+```
+
+Accepts a filename as an argument:
+
+```sh
+flat foo.json
+```
+
+Also accepts JSON on stdin:
+
+```sh
+cat foo.json | flat
+```

New alerts

Deprecated

Maintenance

The maintainer of the package marked it as deprecated. This could indicate that a single version should not be used, or that the package is no longer maintained and any new vulnerabilities will not be fixed.

Found 1 instance in 1 package

Dynamic require

Supply chain risk

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

Found 1 instance in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

Fixed alerts

Deprecated

Maintenance

The maintainer of the package marked it as deprecated. This could indicate that a single version should not be used, or that the package is no longer maintained and any new vulnerabilities will not be fixed.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

20747

increased by5.92%

Lines of code

596

increased by5.86%

Number of lines in readme file

187

increased by16.15%

Worsened metrics

Number of low supply chain risk alerts

2

increased byInfinity%

Dependency changes

• + Addedis-buffer@2.0.5(transitive)

• - Removedis-buffer@1.1.6(transitive)

• Updatedis-buffer@~2.0.3