hof-build - npm Package Compare versions

Comparing version 3.1.3 to 3.1.4-beta-v1

package.json

 {
   "name": "hof-build",
-  "version": "3.1.3",
+  "version": "3.1.4-beta-v1",
   "description": "Performs build workflow for hof apps in prod and development",
@@ -31,2 +31,3 @@ "main": "index.js",
     "duplexify": "^3.5.0",
+    "findup": "^0.1.5",
     "hof-transpiler": "^2.0.2",
@@ -39,3 +40,3 @@ "lodash.merge": "^4.6.0",
     "mkdirp": "^0.5.1",
-    "npm-sass": "^2.2.1",
+    "sass": "^1.35.1",
     "uglify-js": "^2.8.22",
@@ -42,0 +43,0 @@ "witch": "^1.0.0"

tasks/sass/index.js

@@ -5,3 +5,4 @@ 'use strict';
 const path = require('path');
-const sass = require('npm-sass');
+const sass = require('sass');
+const importer = require('../../helpers/importer');
 
@@ -21,5 +22,13 @@ const mkdir = require('../../lib/mkdir');
       if (config.theme) {
+        console.log('Applying theme: ' + config.theme);
         aliases.$$theme = `hof-theme-${config.theme}`;
       }
-      sass(config.sass.src, { aliases }, (err, result) => err ? reject(err) : resolve(result.css));
+      console.log(JSON.stringify(aliases));
+      sass.render({
+        file: config.sass.src,
+        importer: importer({ aliases }),
+        aliases
+      }, function (err, result) {
+        err ? reject(err) : resolve(result.css);
+      });
     }))
@@ -26,0 +35,0 @@ .then(css => new Promise((resolve, reject) => {

New alerts

New author

Supply chain risk

A new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.

Found 1 instance in 1 package

Dynamic require

Supply chain risk

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

Found 1 instance in 1 package

No v1

Quality

Package is not semver >=1. This means it is not stable and does not support ^ ranges.

Found 1 instance in 1 package

Fixed alerts

Deprecated

Maintenance

The maintainer of the package marked it as deprecated. This could indicate that a single version should not be used, or that the package is no longer maintained and any new vulnerabilities will not be fixed.

Found 1 instance in 1 package

Major refactor

Supply chain risk

Package has recently undergone a major refactor. It may be unstable or indicate significant internal changes. Use caution when updating to versions that include significant changes.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

27359

increased by29.05%

Number of package files

26

increased by30%

Lines of code

554

increased by43.15%

Number of medium maintenance alerts

0

decreased by-100%

Worsened metrics

Dependency count

18

increased by5.88%

Number of low quality alerts

1

increased byInfinity%

Number of low supply chain risk alerts

14

increased by16.67%

Dependency changes

• + Addedfindup@^0.1.5

• + Addedsass@^1.35.1

• + Added@parcel/watcher@2.5.1(transitive)

• + Added@parcel/watcher-android-arm64@2.5.1(transitive)

• + Added@parcel/watcher-darwin-arm64@2.5.1(transitive)

• + Added@parcel/watcher-darwin-x64@2.5.1(transitive)

• + Added@parcel/watcher-freebsd-x64@2.5.1(transitive)

• + Added@parcel/watcher-linux-arm-glibc@2.5.1(transitive)

• + Added@parcel/watcher-linux-arm-musl@2.5.1(transitive)

• + Added@parcel/watcher-linux-arm64-glibc@2.5.1(transitive)

• + Added@parcel/watcher-linux-arm64-musl@2.5.1(transitive)

• + Added@parcel/watcher-linux-x64-glibc@2.5.1(transitive)

• + Added@parcel/watcher-linux-x64-musl@2.5.1(transitive)

• + Added@parcel/watcher-win32-arm64@2.5.1(transitive)

• + Added@parcel/watcher-win32-ia32@2.5.1(transitive)

• + Added@parcel/watcher-win32-x64@2.5.1(transitive)

• + Addedchokidar@4.0.3(transitive)

• + Addeddetect-libc@1.0.3(transitive)

• + Addedimmutable@5.0.3(transitive)

• + Addedmicromatch@4.0.8(transitive)

• + Addednode-addon-api@7.1.1(transitive)

• + Addedreaddirp@4.1.1(transitive)

• + Addedsass@1.83.4(transitive)

• + Addedsource-map-js@1.2.1(transitive)

• - Removednpm-sass@^2.2.1

• - Removedabbrev@1.1.1(transitive)

• - Removedajv@6.12.6(transitive)

• - Removedamdefine@1.0.1(transitive)

• - Removedansi-regex@4.1.1(transitive)

• - Removedansi-styles@3.2.1(transitive)

• - Removedaproba@1.2.0(transitive)

• - Removedare-we-there-yet@1.1.7(transitive)

• - Removedargh@0.1.4(transitive)

• - Removedarray-find-index@1.0.2(transitive)

• - Removedasn1@0.2.6(transitive)

• - Removedassert-plus@1.0.0(transitive)

• - Removedasync-foreach@0.1.3(transitive)

• - Removedasynckit@0.4.0(transitive)

• - Removedaws-sign2@0.7.0(transitive)

• - Removedaws4@1.13.2(transitive)

• - Removedbcrypt-pbkdf@1.0.2(transitive)

• - Removedblock-stream@0.0.9(transitive)

• - Removedbluebird@3.7.2(transitive)

• - Removedcamelcase@2.1.15.3.1(transitive)

• - Removedcamelcase-keys@2.1.0(transitive)

• - Removedcamelify@0.0.2(transitive)

• - Removedcaseless@0.12.0(transitive)

• - Removedcliui@5.0.0(transitive)

• - Removedcode-point-at@1.1.0(transitive)

• - Removedcolor-convert@1.9.3(transitive)

• - Removedcolor-name@1.1.3(transitive)

• - Removedcombined-stream@1.0.8(transitive)

• - Removedconsole-control-strings@1.1.0(transitive)

• - Removedcore-util-is@1.0.2(transitive)

• - Removedcross-spawn@3.0.1(transitive)

• - Removedcurrently-unhandled@0.4.1(transitive)

• - Removeddashdash@1.14.1(transitive)

• - Removeddelayed-stream@1.0.0(transitive)

• - Removeddelegates@1.0.0(transitive)

• - Removedecc-jsbn@0.1.2(transitive)

• - Removedemoji-regex@7.0.3(transitive)

• - Removederror-ex@1.3.2(transitive)

• - Removedextend@3.0.2(transitive)

• - Removedextsprintf@1.3.0(transitive)

• - Removedfast-deep-equal@3.1.3(transitive)

• - Removedfast-json-stable-stringify@2.1.0(transitive)

• - Removedfind-up@1.1.23.0.0(transitive)

• - Removedforever-agent@0.6.1(transitive)

• - Removedform-data@2.3.3(transitive)

• - Removedfstream@1.0.12(transitive)

• - Removedgauge@2.7.4(transitive)

• - Removedgaze@1.1.3(transitive)

• - Removedget-caller-file@2.0.5(transitive)

• - Removedget-stdin@4.0.1(transitive)

• - Removedgetpass@0.1.7(transitive)

• - Removedglob@6.0.47.1.7(transitive)

• - Removedglobule@1.3.4(transitive)

• - Removedgraceful-fs@4.2.11(transitive)

• - Removedhar-schema@2.0.0(transitive)

• - Removedhar-validator@5.1.5(transitive)

• - Removedhas-unicode@2.0.1(transitive)

• - Removedhosted-git-info@2.8.9(transitive)

• - Removedhttp-signature@1.2.0(transitive)

• - Removedin-publish@2.0.1(transitive)

• - Removedindent-string@2.1.0(transitive)

• - Removedis-arrayish@0.2.1(transitive)

• - Removedis-finite@1.1.0(transitive)

• - Removedis-fullwidth-code-point@1.0.02.0.0(transitive)

• - Removedis-typedarray@1.0.0(transitive)

• - Removedis-utf8@0.2.1(transitive)

• - Removedisexe@2.0.0(transitive)

• - Removedisstream@0.1.2(transitive)

• - Removedjs-base64@2.6.4(transitive)

• - Removedjsbn@0.1.1(transitive)

• - Removedjson-schema@0.4.0(transitive)

• - Removedjson-schema-traverse@0.4.1(transitive)

• - Removedjson-stringify-safe@5.0.1(transitive)

• - Removedjsprim@1.4.2(transitive)

• - Removedload-json-file@1.1.0(transitive)

• - Removedlocate-path@3.0.0(transitive)

• - Removedloud-rejection@1.6.0(transitive)

• - Removedlru-cache@4.1.5(transitive)

• - Removedmap-obj@1.0.1(transitive)

• - Removedmeow@3.7.0(transitive)

• - Removedmime-db@1.52.0(transitive)

• - Removedmime-types@2.1.35(transitive)

• - Removedminimatch@3.0.8(transitive)

• - Removednan@2.22.0(transitive)

• - Removednode-gyp@3.8.0(transitive)

• - Removednode-sass@4.14.1(transitive)

• - Removednopt@3.0.6(transitive)

• - Removednormalize-package-data@2.5.0(transitive)

• - Removednpm-sass@2.3.0(transitive)

• - Removednpmlog@4.1.2(transitive)

• - Removednumber-is-nan@1.0.1(transitive)

• - Removedoauth-sign@0.9.0(transitive)

• - Removedobject-assign@4.1.1(transitive)

• - Removedos-homedir@1.0.2(transitive)

• - Removedos-tmpdir@1.0.2(transitive)

• - Removedosenv@0.1.5(transitive)

• - Removedp-limit@2.3.0(transitive)

• - Removedp-locate@3.0.0(transitive)

• - Removedp-try@2.2.0(transitive)

• - Removedparse-json@2.2.0(transitive)

• - Removedpath-exists@2.1.03.0.0(transitive)

• - Removedpath-type@1.1.0(transitive)

• - Removedperformance-now@2.1.0(transitive)

• - Removedpify@2.3.0(transitive)

• - Removedpinkie@2.0.4(transitive)

• - Removedpinkie-promise@2.0.1(transitive)

• - Removedpseudomap@1.0.2(transitive)

• - Removedpsl@1.15.0(transitive)

• - Removedpunycode@2.3.1(transitive)

• - Removedqs@6.5.3(transitive)

• - Removedread-pkg@1.1.0(transitive)

• - Removedread-pkg-up@1.0.1(transitive)

• - Removedredent@1.0.0(transitive)

• - Removedrepeating@2.0.1(transitive)

• - Removedrequest@2.88.2(transitive)

• - Removedrequire-directory@2.1.1(transitive)

• - Removedrequire-main-filename@2.0.0(transitive)

• - Removedsafer-buffer@2.1.2(transitive)

• - Removedsass-graph@2.2.5(transitive)

• - Removedscss-tokenizer@0.2.3(transitive)

• - Removedsemver@5.3.0(transitive)

• - Removedset-blocking@2.0.0(transitive)

• - Removedsignal-exit@3.0.7(transitive)

• - Removedsource-map@0.4.4(transitive)

• - Removedspdx-correct@3.2.0(transitive)

• - Removedspdx-exceptions@2.5.0(transitive)

• - Removedspdx-expression-parse@3.0.1(transitive)

• - Removedspdx-license-ids@3.0.21(transitive)

• - Removedsshpk@1.18.0(transitive)

• - Removedstdout-stream@1.4.1(transitive)

• - Removedstring-width@1.0.23.1.0(transitive)

• - Removedstrip-ansi@5.2.0(transitive)

• - Removedstrip-bom@2.0.0(transitive)

• - Removedstrip-indent@1.0.1(transitive)

• - Removedtar@2.2.2(transitive)

• - Removedtough-cookie@2.5.0(transitive)

• - Removedtrim-newlines@1.0.0(transitive)

• - Removedtrue-case-path@1.0.3(transitive)

• - Removedtunnel-agent@0.6.0(transitive)

• - Removedtweetnacl@0.14.5(transitive)

• - Removeduri-js@4.4.1(transitive)

• - Removeduuid@3.4.0(transitive)

• - Removedvalidate-npm-package-license@3.0.4(transitive)

• - Removedverror@1.10.0(transitive)

• - Removedwhich@1.3.1(transitive)

• - Removedwhich-module@2.0.1(transitive)

• - Removedwide-align@1.1.5(transitive)

• - Removedwrap-ansi@5.1.0(transitive)

• - Removedy18n@4.0.3(transitive)

• - Removedyallist@2.1.2(transitive)

• - Removedyargs@13.3.2(transitive)

• - Removedyargs-parser@13.1.2(transitive)