hexo-generator-better-sitemap - npm Package Compare versions

Comparing version 1.0.0-rc.5 to 1.0.0

lib/common.js

@@ -1,5 +0,4 @@
-const Promise = require('bluebird');
-const fs = Promise.promisifyAll(require('fs'));
+const fs = require('fs/promises');
 
-const getPostUpdated = ({ updated }) => updated.toDate();
+const getPostUpdated = ({ updated, date }) => updated?.toDate() ?? date?.toDate() ?? 0;
 
@@ -14,3 +13,3 @@ const common = {
   getFileContent(filePath) {
-    return fs.readFileAsync(filePath, { encoding: 'utf8' });
+    return fs.readFile(filePath, { encoding: 'utf-8' });
   },
@@ -17,0 +16,0 @@ getIndexSitemapFilename({ sitemap, root }) {

lib/generator.js

@@ -1,3 +0,1 @@
-const Promise = require('bluebird');
-
 const seoFriendlySitemap = function (locals) {
@@ -4,0 +2,0 @@ const { config } = this;

lib/render.js

 const path = require('path');
-const Promise = require('bluebird');
 const ejs = require('ejs');
-const beautify = require('pretty-data').pd;
 const common = require('./common');
@@ -22,6 +20,2 @@ const url = require('url');
 
-    if (config.sitemap.beautify) {
-      xml = beautify.xml(xml);
-    }
-
     return {
@@ -28,0 +22,0 @@ path: filename,

package.json

 {
     "name": "hexo-generator-better-sitemap",
     "description": "SEO-friendly sitemap generator plugin for Hexo",
-    "version": "1.0.0-rc.5",
+    "version": "1.0.0",
     "author": {
@@ -14,10 +14,8 @@ "name": "SukkaW",
     "dependencies": {
-        "bluebird": "^3.7.1",
-        "ejs": "^2.7.3",
+        "ejs": "^3.1.6",
         "moment": "^2.24.0",
-        "pretty-data": "^0.40.0",
         "url-join": "^4.0.1"
     },
     "engines": {
-        "node": ">=10"
+        "node": ">=12"
     },
@@ -24,0 +22,0 @@ "files": [

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Native code

Supply chain risk

Contains native code (e.g., compiled binaries or shared libraries). Including native code can obscure malicious behavior.

Found 1 instance in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

No v1

Quality

Package is not semver >=1. This means it is not stable and does not support ^ ranges.

Found 1 instance in 1 package

Improved metrics

Dependency count

3

decreased by-40%

Number of low quality alerts

0

decreased by-100%

Number of medium supply chain risk alerts

0

decreased by-100%

Worsened metrics

Total package byte prevSize

23417

decreased by-21.93%

Number of package files

22

decreased by-4.35%

Lines of code

257

decreased by-2.65%

Dependency changes

• + Addedansi-styles@4.3.0(transitive)

• + Addedasync@3.2.6(transitive)

• + Addedbalanced-match@1.0.2(transitive)

• + Addedbrace-expansion@1.1.112.0.1(transitive)

• + Addedchalk@4.1.2(transitive)

• + Addedcolor-convert@2.0.1(transitive)

• + Addedcolor-name@1.1.4(transitive)

• + Addedconcat-map@0.0.1(transitive)

• + Addedejs@3.1.10(transitive)

• + Addedfilelist@1.0.4(transitive)

• + Addedhas-flag@4.0.0(transitive)

• + Addedjake@10.9.2(transitive)

• + Addedminimatch@3.1.25.1.6(transitive)

• + Addedsupports-color@7.2.0(transitive)

• - Removedbluebird@^3.7.1

• - Removedpretty-data@^0.40.0

• - Removedbluebird@3.7.2(transitive)

• - Removedejs@2.7.4(transitive)

• - Removedpretty-data@0.40.0(transitive)

• Updatedejs@^3.1.6