has-cors - npm Package Compare versions

Comparing version 1.0.3 to 1.1.0

component.json

@@ -5,7 +5,4 @@ {
   "description": "Detects support for Cross-Origin Resource Sharing",
-  "version": "1.0.3",
+  "version": "1.1.0",
   "keywords": [],
-  "dependencies": {
-    "component/global": "2.0.1"
-  },
   "development": {},
@@ -12,0 +9,0 @@ "license": "MIT",

History.md

 
+1.1.0 / 2014-11-12
+==================
+
+  * remove "global" module dependency (#2, @achingbrain)
+
 1.0.2 / 2013-08-27
 ==================
 
- - explicitly use `global` instead of being implicit
- - pin "component/global" to v2.0.1
+  * explicitly use `global` instead of being implicit
+  * pin "component/global" to v2.0.1
 
@@ -11,3 +16,3 @@ 1.0.1 / 2013-08-23
 
- - package: add "component" section
+  * package: add "component" section
 
@@ -17,2 +22,2 @@ 1.0.0 / 2013-08-22
 
- - Initial release
+  * Initial release

index.js

 
 /**
- * Module dependencies.
- */
-
-var global = require('global');
-
-/**
  * Module exports.
@@ -17,4 +11,4 @@ *
 try {
-  module.exports = 'XMLHttpRequest' in global &&
-    'withCredentials' in new global.XMLHttpRequest();
+  module.exports = typeof XMLHttpRequest !== 'undefined' &&
+    'withCredentials' in new XMLHttpRequest();
 } catch (err) {
@@ -21,0 +15,0 @@ // if XMLHttp support is disabled in IE then it will throw

package.json

 {
   "name": "has-cors",
-  "version": "1.0.3",
+  "version": "1.1.0",
   "description": "Detects support for Cross-Origin Resource Sharing",
@@ -10,5 +10,2 @@ "main": "index.js",
   },
-  "dependencies": {
-    "global": "https://github.com/component/global/archive/v2.0.1.tar.gz"
-  },
   "keywords": [
@@ -28,3 +25,10 @@ "cors",
     }
+  },
+  "devDependencies": {
+    "mocha": "^2.0",
+    "chai": "^1.10"
+  },
+  "scripts": {
+    "test": "mocha"
   }
 }

Fixed alerts

HTTP dependency

Supply chain risk

Contains a dependency which resolves to a remote HTTP URL which could be used to inject untrusted code and reduce overall package reliability.

Found 1 instance in 1 package

No tests

Quality

Package does not have any tests. This is a strong signal of a poorly maintained or low quality package.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

2707

increased by23.49%

Dependency count

0

decreased by-100%

Number of package files

8

increased by14.29%

Lines of code

46

increased by31.43%

Number of low quality alerts

0

decreased by-100%

Number of critical supply chain risk alerts

0

decreased by-100%

Worsened metrics

Dev dependency count

2

increased byInfinity%

Dependency changes

• - Removedglobal@https://github.com/component/global/archive/v2.0.1.tar.gz