graphql-playground-middleware-express - npm Package Compare versions

Comparing version 1.3.10 to 1.3.11

package.json

 {
   "name": "graphql-playground-middleware-express",
-  "version": "1.3.10",
+  "version": "1.3.11",
   "homepage": "https://github.com/graphcool/graphql-playground/tree/master/packages/graphql-playground-middleware-express",
@@ -32,7 +32,7 @@ "description": "GraphQL IDE for better development workflows (GraphQL Subscriptions, interactive docs & collaboration).",
   "devDependencies": {
-    "@types/node": "^8.0.47",
-    "typescript": "^2.6.1"
+    "@types/node": "^8.5.2",
+    "typescript": "^2.6.2"
   },
   "dependencies": {
-    "graphql-playground-html": "^1.3.10-beta.3",
+    "graphql-playground-html": "^1.3.11",
     "graphql-playground-middleware": "^1.2.1-beta.6"
@@ -39,0 +39,0 @@ },

New alerts

New author

Supply chain risk

A new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.

Found 1 instance in 1 package

Fixed alerts

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

Improved metrics

Number of low supply chain risk alerts

1

decreased by-50%

Worsened metrics

Total package byte prevSize

5965

decreased by-38.13%

Number of package files

4

decreased by-42.86%

Lines of code

75

decreased by-33.04%

Number of medium supply chain risk alerts

1

increased byInfinity%

Dependency changes

• Updatedgraphql-playground-html@^1.3.11