frisbee - npm Package Compare versions

Comparing version 1.1.7 to 3.1.4

package.json

 {
   "name": "frisbee",
-  "description": "Stripe-inspired API wrapper around ES6/ES7's fetch() method for making simple HTTP requests (alternative to superagent, request, axios)",
-  "version": "1.1.7",
-  "author": "Nick Baugh <[e-mail]>",
+  "description": "Modern fetch-based alternative to axios/superagent/request. Great for React Native.",
+  "version": "3.1.4",
+  "author": "Nick Baugh <[e-mail]> (http://niftylettuce.com/)",
+  "ava": {
+    "failFast": true,
+    "verbose": true,
+    "files": [
+      "test/**/*.test.js"
+    ]
+  },
   "bugs": {
-    "url": "https://github.com/glazedio/frisbee/issues",
+    "url": "https://github.com/niftylettuce/frisbee/issues",
     "email": "[e-mail]"
   },
+  "commitlint": {
+    "extends": [
+      "@commitlint/config-conventional"
+    ]
+  },
+  "contributors": [
+    "Nick Baugh <[e-mail]> (http://niftylettuce.com/)",
+    "Alexis Tyler <[e-mail]>",
+    "Assem-Hafez <[e-mail]>",
+    "Jordan Denison <[e-mail]>",
+    "James <[e-mail]>",
+    "Sampsa Saarela <[e-mail]>",
+    "Julien Moutte <[e-mail]>",
+    "Charles Soetan <[e-mail]>",
+    "Kesha Antonov <[e-mail]>",
+    "Ben Turley <[e-mail]>",
+    "Richard Evans <[e-mail]>",
+    "Hawken Rives <[e-mail]>",
+    "Fernando Montoya <[e-mail]>",
+    "Brent Vatne <[e-mail]>",
+    "Hosmel Quintana <[e-mail]>",
+    "Kyle Kirbatski <[e-mail]>",
+    "Adam Jenkins <[e-mail]>"
+  ],
   "dependencies": {
-    "babel-runtime": "^6.9.2",
-    "buffer": "^4.6.0",
-    "caseless": "^0.11.0",
-    "qs": "^6.2.0"
+    "@babel/runtime": "^7.10.2",
+    "abortcontroller-polyfill": "^1.4.0",
+    "boolean": "^3.0.1",
+    "caseless": "^0.12.0",
+    "common-tags": "^1.8.0",
+    "cross-fetch": "^3.0.4",
+    "debug": "^4.1.1",
+    "qs": "6.9.4",
+    "url-join": "^4.0.1",
+    "url-parse": "^1.4.7"
   },
   "devDependencies": {
-    "@earnest/eslint-config-es7": "^2.1.1",
-    "babel-cli": "^6.9.0",
-    "babel-core": "^6.9.1",
-    "babel-eslint": "^6.0.4",
-    "babel-istanbul": "^0.8.0",
-    "babel-plugin-transform-runtime": "^6.9.0",
-    "babel-polyfill": "^6.9.1",
-    "babel-preset-es2015": "^6.9.0",
-    "babel-preset-stage-0": "^6.5.0",
-    "babelify": "^7.3.0",
-    "body-parser": "^1.15.1",
-    "bower": "^1.7.9",
-    "browserify": "^13.0.1",
-    "chai": "^3.5.0",
-    "cors": "^2.7.1",
-    "coveralls": "^2.11.9",
-    "dirty-chai": "^1.2.2",
-    "es6-promise": "^3.2.1",
-    "eslint": "^2.11.1",
-    "eslint-plugin-babel": "^3.2.0",
-    "eslint-plugin-mocha": "~2.0.0",
-    "express": "^4.13.4",
-    "isomorphic-fetch": "^2.2.1",
-    "isparta": "^4.0.0",
-    "istanbul": "^0.4.3",
-    "jsdom": "^9.2.1",
-    "jshint": "^2.9.2",
-    "mocha": "^2.5.3",
-    "source-map-support": "^0.4.0"
+    "@babel/cli": "^7.10.1",
+    "@babel/core": "^7.10.2",
+    "@babel/plugin-transform-runtime": "^7.10.1",
+    "@babel/preset-env": "^7.10.2",
+    "@commitlint/cli": "^8.3.5",
+    "@commitlint/config-conventional": "^8.3.4",
+    "@ladjs/browserslist-config": "^0.0.1",
+    "ava": "^3.8.2",
+    "babelify": "^10.0.0",
+    "body-parser": "^1.19.0",
+    "browserify": "^16.5.1",
+    "codecov": "^3.7.0",
+    "cors": "^2.8.5",
+    "cross-env": "^7.0.2",
+    "es6-promise": "^4.2.8",
+    "eslint": "6.x",
+    "eslint-config-xo-lass": "^1.0.3",
+    "eslint-plugin-compat": "^3.7.0",
+    "eslint-plugin-node": "^11.1.0",
+    "express": "^4.17.1",
+    "fixpack": "^3.0.6",
+    "husky": "^4.2.5",
+    "is-stream": "^2.0.0",
+    "jsdom": "15.2.1",
+    "lint-staged": "^10.2.7",
+    "lodash": "^4.17.15",
+    "nyc": "^15.0.1",
+    "remark-cli": "^8.0.0",
+    "remark-preset-github": "^1.0.1",
+    "rimraf": "^3.0.2",
+    "sinon": "^9.0.2",
+    "tinyify": "^2.5.2",
+    "xo": "0.25"
   },
   "engines": {
-    "node": "6.x||7.x"
+    "node": ">=8.9.4"
   },
-  "homepage": "https://github.com/glazedio/frisbee",
+  "files": [
+    "lib",
+    "dist"
+  ],
+  "homepage": "https://github.com/niftylettuce/frisbee",
+  "husky": {
+    "hooks": {
+      "pre-commit": "npm test",
+      "commit-msg": "commitlint -E HUSKY_GIT_PARAMS"
+    }
+  },
+  "jsdelivr": "dist/frisbee.min.js",
   "keywords": [
@@ -75,18 +127,68 @@ "api",
   "license": "MIT",
-  "main": "lib/frisbee.js",
+  "lint-staged": {
+    "linters": {
+      "*.js": [
+        "xo --fix",
+        "git add"
+      ],
+      "*.md": [
+        "remark . -qfo",
+        "git add"
+      ],
+      "package.json": [
+        "fixpack",
+        "git add"
+      ]
+    }
+  },
+  "main": "lib/index.js",
+  "prettier": {
+    "singleQuote": true,
+    "bracketSpacing": true,
+    "trailingComma": "none"
+  },
+  "remarkConfig": {
+    "plugins": [
+      "preset-github"
+    ]
+  },
   "repository": {
     "type": "git",
-    "url": "https://github.com/glazedio/frisbee"
+    "url": "https://github.com/niftylettuce/frisbee"
   },
   "scripts": {
-    "analyze-coverage": "NODE_ENV=test node_modules/.bin/babel-node node_modules/.bin/isparta cover node_modules/.bin/_mocha",
-    "browserify": "node_modules/.bin/browserify -t babelify test/unit/browser.js > test/unit/browser.bundled.js",
-    "build": "node_modules/.bin/babel src --modules common --out-dir lib",
-    "check-coverage": "node_modules/.bin/babel-node node_modules/.bin/istanbul check-coverage",
-    "coverage": "npm run lint && npm run build && npm run analyze-coverage && npm run check-coverage && cat ./coverage/lcov.info | ./node_modules/coveralls/bin/coveralls.js && rm -rf ./coverage/",
-    "lint": "node_modules/.bin/eslint .",
-    "prepublish": "npm run build",
-    "test": "npm run lint && npm run browserify && NODE_ENV=test _mocha --compilers js:babel-core/register",
-    "watch": "node_modules/.bin/babel src --watch --modules common --out-dir lib --source-maps"
+    "ava": "cross-env NODE_ENV=test ava",
+    "browserify": "browserify src/index.js -o dist/frisbee.js -s Frisbee -d -g [ babelify --configFile ./.dist.babelrc.config.js ]",
+    "build": "npm run build:clean && npm run build:lib && npm run build:dist",
+    "build:clean": "rimraf lib dist",
+    "build:dist": "npm run browserify && npm run minify",
+    "build:lib": "babel --config-file ./.lib.babelrc src --out-dir lib",
+    "coverage": "nyc report --reporter=text-lcov > coverage.lcov && codecov",
+    "lint": "xo && remark . -qfo && eslint --no-inline-config -c .lib.eslintrc lib && eslint --no-inline-config -c .dist.eslintrc dist",
+    "minify": "cross-env NODE_ENV=production browserify src/index.js -o dist/frisbee.min.js -s Frisbee -g [ babelify --configFile ./.dist.babelrc.config.js ] -p tinyify",
+    "nyc": "cross-env NODE_ENV=test nyc ava",
+    "test": "npm run build && npm run lint && npm run ava",
+    "test-coverage": "npm run build && npm run lint && npm run nyc"
+  },
+  "unpkg": "dist/frisbee.min.js",
+  "xo": {
+    "prettier": true,
+    "space": true,
+    "extends": [
+      "xo-lass"
+    ],
+    "env": [
+      "node",
+      "browser"
+    ],
+    "ignore": [
+      "config.js"
+    ],
+    "rules": {
+      "complexity": [
+        "error",
+        38
+      ]
+    }
   }
 }

New alerts

Uses eval

Supply chain risk

Package uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Found 1 instance in 1 package

Dynamic require

Supply chain risk

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 2 instances in 1 package

Fixed alerts

Deprecated

Maintenance

The maintainer of the package marked it as deprecated. This could indicate that a single version should not be used, or that the package is no longer maintained and any new vulnerabilities will not be fixed.

Found 1 instance in 1 package

URL strings

Supply chain risk

Package contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

868830

2586.8%

Lines of code

8291

2557.37%

Number of medium maintenance alerts

0

-100%

Number of lines in readme file

647

72.53%

Worsened metrics

Dependency count

10

150%

Dev dependency count

33

13.79%

Number of package files

7

-22.22%

Number of low supply chain risk alerts

4

300%

Number of medium supply chain risk alerts

2

100%

Dependency changes

• + Added

  @babel/runtime@^7.10.2

• + Added

  abortcontroller-polyfill@^1.4.0

• + Added

  boolean@^3.0.1

• + Added

  common-tags@^1.8.0

• + Added

  cross-fetch@^3.0.4

• + Added

  debug@^4.1.1

• + Added

  url-join@^4.0.1

• + Added

  url-parse@^1.4.7

• + Added

  @babel/runtime@7.27.1
  (transitive)

• + Added

  abortcontroller-polyfill@1.7.8
  (transitive)

• + Added

  boolean@3.2.0
  (transitive)

• + Added

  caseless@0.12.0
  (transitive)

• + Added

  common-tags@1.8.2
  (transitive)

• + Added

  cross-fetch@3.2.0
  (transitive)

• + Added

  debug@4.4.1
  (transitive)

• + Added

  ms@2.1.3
  (transitive)

• + Added

  node-fetch@2.7.0
  (transitive)

• + Added

  qs@6.9.4
  (transitive)

• + Added

  querystringify@2.2.0
  (transitive)

• + Added

  requires-port@1.0.0
  (transitive)

• + Added

  tr46@0.0.3
  (transitive)

• + Added

  url-join@4.0.1
  (transitive)

• + Added

  url-parse@1.5.10
  (transitive)

• + Added

  webidl-conversions@3.0.1
  (transitive)

• + Added

  whatwg-url@5.0.0
  (transitive)

• - Removed

  babel-runtime@^6.9.2

• - Removed

  buffer@^4.6.0

• - Removed

  babel-runtime@6.26.0
  (transitive)

• - Removed

  base64-js@1.5.1
  (transitive)

• - Removed

  buffer@4.9.2
  (transitive)

• - Removed

  call-bind-apply-helpers@1.0.2
  (transitive)

• - Removed

  call-bound@1.0.4
  (transitive)

• - Removed

  caseless@0.11.0
  (transitive)

• - Removed

  core-js@2.6.12
  (transitive)

• - Removed

  dunder-proto@1.0.1
  (transitive)

• - Removed

  es-define-property@1.0.1
  (transitive)

• - Removed

  es-errors@1.3.0
  (transitive)

• - Removed

  es-object-atoms@1.1.1
  (transitive)

• - Removed

  function-bind@1.1.2
  (transitive)

• - Removed

  get-intrinsic@1.3.0
  (transitive)

• - Removed

  get-proto@1.0.1
  (transitive)

• - Removed

  gopd@1.2.0
  (transitive)

• - Removed

  has-symbols@1.1.0
  (transitive)

• - Removed

  hasown@2.0.2
  (transitive)

• - Removed

  ieee754@1.2.1
  (transitive)

• - Removed

  isarray@1.0.0
  (transitive)

• - Removed

  math-intrinsics@1.1.0
  (transitive)

• - Removed

  object-inspect@1.13.4
  (transitive)

• - Removed

  qs@6.14.0
  (transitive)

• - Removed

  regenerator-runtime@0.11.1
  (transitive)

• - Removed

  side-channel@1.1.0
  (transitive)

• - Removed

  side-channel-list@1.0.0
  (transitive)

• - Removed

  side-channel-map@1.0.1
  (transitive)

• - Removed

  side-channel-weakmap@1.0.2
  (transitive)

• Updated

  caseless@^0.12.0

• Updated

  qs@6.9.4