graphql-ws - npm Package Compare versions

Comparing version 5.12.0 to 5.12.1

package.json

 {
   "name": "graphql-ws",
-  "version": "5.12.0",
+  "version": "5.12.1",
   "description": "Coherent, zero-dependency, lazy, simple, GraphQL over WebSocket Protocol compliant server and client",
@@ -30,3 +30,3 @@ "keywords": [
   },
-  "packageManager": "yarn@3.4.1",
+  "packageManager": "yarn@3.5.0",
   "types": "lib/index.d.ts",
@@ -97,3 +97,3 @@ "main": "lib/index.js",
   "devDependencies": {
-    "@babel/core": "^7.21.0",
+    "@babel/core": "^7.21.4",
     "@babel/plugin-proposal-class-properties": "^7.18.6",
@@ -103,35 +103,35 @@ "@babel/plugin-proposal-nullish-coalescing-operator": "^7.18.6",
     "@babel/plugin-proposal-optional-chaining": "^7.21.0",
-    "@babel/preset-env": "^7.20.2",
-    "@babel/preset-typescript": "^7.21.0",
-    "@fastify/websocket": "^7.1.2",
+    "@babel/preset-env": "^7.21.4",
+    "@babel/preset-typescript": "^7.21.4",
+    "@fastify/websocket": "^7.2.0",
     "@rollup/plugin-terser": "^0.4.0",
     "@rollup/plugin-typescript": "^11.0.0",
-    "@semantic-release/changelog": "^6.0.2",
+    "@semantic-release/changelog": "^6.0.3",
     "@semantic-release/git": "^10.0.1",
-    "@types/eslint": "^8.21.1",
+    "@types/eslint": "^8.37.0",
     "@types/glob": "^8.1.0",
-    "@types/jest": "^29.4.0",
+    "@types/jest": "^29.5.0",
     "@types/ws": "^8.5.4",
-    "@typescript-eslint/eslint-plugin": "^5.54.0",
-    "@typescript-eslint/parser": "^5.54.0",
-    "babel-jest": "^29.4.3",
-    "eslint": "^8.35.0",
-    "eslint-config-prettier": "^8.6.0",
-    "fastify": "^4.14.0",
+    "@typescript-eslint/eslint-plugin": "^5.57.0",
+    "@typescript-eslint/parser": "^5.57.0",
+    "babel-jest": "^29.5.0",
+    "eslint": "^8.37.0",
+    "eslint-config-prettier": "^8.8.0",
+    "fastify": "^4.15.0",
     "fastify-websocket": "4.2.2",
-    "glob": "^9.2.1",
+    "glob": "^9.3.2",
     "graphql": "^16.6.0",
-    "jest": "^29.4.3",
-    "jest-environment-jsdom": "^29.4.3",
-    "jest-jasmine2": "^29.4.3",
-    "prettier": "^2.8.4",
+    "jest": "^29.5.0",
+    "jest-environment-jsdom": "^29.5.0",
+    "jest-jasmine2": "^29.5.0",
+    "prettier": "^2.8.7",
     "replacestream": "^4.0.3",
-    "rollup": "^3.18.0",
-    "semantic-release": "^20.1.1",
+    "rollup": "^3.20.2",
+    "semantic-release": "^21.0.0",
     "subscriptions-transport-ws": "^0.11.0",
     "tslib": "^2.5.0",
-    "typedoc": "^0.23.26",
+    "typedoc": "^0.23.28",
     "typedoc-plugin-markdown": "^3.14.0",
-    "typescript": "^4.9.5",
-    "uWebSockets.js": "uNetworking/uWebSockets.js#v20.19.0",
+    "typescript": "^5.0.3",
+    "uWebSockets.js": "uNetworking/uWebSockets.js#v20.20.0",
     "ws": "8.12.0",
@@ -138,0 +138,0 @@ "ws7": "npm:ws@^7.5.9"

PROTOCOL.md

@@ -37,2 +37,4 @@ # GraphQL over WebSocket Protocol
 
+If the server wishes to reject the connection, for example during authentication, it is recommended to close the socket with `4403: Forbidden`.
+
 ```typescript
@@ -227,7 +229,7 @@ interface ConnectionInitMessage {
    - _Server_ receives `Complete` message and completes the source stream
-   - _Client_ ignores all further messages that it recives with this ID
+   - _Client_ ignores all further messages that it receives with this ID
      <br>**or**
    - _Server_ dispatches the `Complete` message indicating that the source stream has completed
    - **Simultaneously** _client_ stops the subscription by dispatching a `Complete` message
-   - _Client_ ignores all further messages that it recives with this ID
+   - _Client_ ignores all further messages that it receives with this ID
    - _Server_ ignores the `Complete` message from the client
@@ -234,0 +236,0 @@

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Native code

Supply chain risk

Contains native code (e.g., compiled binaries or shared libraries). Including native code can obscure malicious behavior.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

359848

increased by0.06%

Number of medium supply chain risk alerts

0

decreased by-100%

No dependency changes