gherkin - npm Package Compare versions

Comparing version 4.1.2 to 4.1.3

CONTRIBUTING.md

@@ -21,11 +21,1 @@ Please read [CONTRIBUTING](https://github.com/cucumber/gherkin/blob/master/CONTRIBUTING.md) first.
     make dist/gherkin.js
-
-## Make a release
-
-    # Do not manually change the version in package.json - this
-    # happens during npm version.
-    npm outdated --depth 0 # See if you can upgrade anything
-    npm version NEW_VERSION
-    npm publish
-    git push
-    git push --tags

index.js

@@ -1,13 +0,15 @@
-(function (root, factory) {
+(function (factory) {
   if (typeof define === 'function' && define.amd) {
-    // AMD. Register as an anonymous module.
-    define([], factory);
-  } else if (typeof module !== 'undefined' && module.exports) {
-    // Node.js/IO.js/RequireJS
+    // AMD. Register as an anonymous module
+    define([], factory)
+  }
+  if (typeof module !== 'undefined' && module.exports) {
+    // Node.js/RequireJS
     module.exports = factory();
-  } else {
-    // Browser globals (root is window)
-    root.Gherkin = factory();
   }
-}(this, function () {
+  if (typeof window === 'object'){
+    // Browser globals
+    window.Gherkin = factory();
+  }
+}(function () {
   return {
@@ -20,8 +22,4 @@ Parser: require('./lib/gherkin/parser'),
     DIALECTS: require('./lib/gherkin/dialects'),
-    Stream: {
-      createGherkinStream: require('./lib/gherkin/stream/gherkin_stream'),
-      createSourceEventStream: require('./lib/gherkin/stream/source_event_stream'),
-      createNdjsonStream: require('./lib/gherkin/stream/ndjson_stream')
-    }
+    generateEvents: require('./lib/gherkin/generate_events')
   };
 }));

package.json

 {
   "name": "gherkin",
-  "version": "4.1.2",
+  "version": "4.1.3",
   "description": "Gherkin parser",
@@ -5,0 +5,0 @@ "main": "index.js",

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Dynamic require

Supply chain risk

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 2 instances in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

Improved metrics

Number of low supply chain risk alerts

5

decreased by-70.59%

Worsened metrics

Total package byte prevSize

1483475

decreased by-13.6%

Lines of code

13264

decreased by-25.78%

No dependency changes