instabug-cordova - npm Package Compare versions

Comparing version 9.1.7 to 11.0.0

CHANGELOG.md

@@ -0,1 +1,25 @@
+## v11.0.0 (2022-07-07)
+
+* Bumps Instabug native SDKs to v11
+* Adds the ability to initialize the Android SDK from JavaScript. Check the migration guide referenced in our docs
+* Improves Instabug modules import usage. Check the migration guide referenced in our docs
+* Migrates Instabug iOS SDK to be installed through CocoaPods
+* Moves Instabug.setVideoRecordingFloatingButtonPosition to the BugReporting module
+* Adds Instabug.setString API to allow for SDK text customizations
+* Replaces Instabug.setShakingThreshold with BugReporting.setShakingThresholdForAndroid
+* Adds new API BugReporting.setShakingThresholdForiPhone
+* Adds new API BugReporting.setShakingThresholdForiPad
+* Adds new API Instabug.setWelcomeMessageMode
+* Adds new API Instabug.setColorTheme
+* Adds new API Instabug.setSessionProfilerEnabled
+* Adds new API BugReporting.setFloatingButtonEdge
+* Fixes an issue with uploading attachments in URL form on iOS
+* Fixes an issue with BugReporting.setEnabledAttachmentTypes not working on Android
+* Removes the deprecated APIs. Check the migration guide referenced in our docs
+* Removes the Android multidex dependency
+* Removes Instabug.setAutoScreenRecordingMaxDuration
+* Removes Surveys.setThresholdForReshowingSurveyAfterDismiss
+* Removes BugReporting.invocationModes enum
+
+
 ## v9.1.7 (2021-05-11)
@@ -2,0 +26,0 @@

package.json

 {
   "name": "instabug-cordova",
-  "version": "9.1.7",
+  "version": "11.0.0",
   "description": "The purpose of this plugin is to simplify the process of integrating the Instabug SDK in a hybrid application, as well as to provide an interface to interfacing with the SDK through JavaScript.",
-  "main": "index.js",
+  "main": "www/index.js",
   "repository": {
@@ -15,6 +15,4 @@ "type": "git",
   },
-  "dependencies": {
-    "xcode": "^0.9.0"
-  },
+  "dependencies": {},
   "homepage": "https://github.com/Instabug/instabug-cordova#readme"
 }

README.md

@@ -23,44 +23,13 @@ # Instabug Cordova Plugin
 
-## Android Integration Steps
+## Integration Steps
 
-1. Change the name of the application class in your AndroidManifest.xml file to `android:name="com.instabug.cordova.plugin.MyApplication"`.
+- Add the following snippet to your `index.js` file inside `onDeviceReady` function:   
 
-2. You need to add your app token in the **MyApplication** class, by replacing `YOUR_ANDROID_TOKEN`. (You can find this class under this path `YourProjectName/platforms/android/app/src/main/java/com.instabug.cordova.plugin/MyApplication.java`)
+```js
+var Instabug = cordova.require('instabug-cordova.Instabug');
+var BugReporting = cordova.require('instabug-cordova.BugReporting');
 
-3. You can change the invocation event by changing this line `InstabugInvocationEvent.SHAKE` in the **MyApplication** class to any of the following:
-
-`InstabugInvocationEvent.FLOATING_BUTTON`, `InstabugInvocationEvent.SCREENSHOT_GESTURE`, `InstabugInvocationEvent.TWO_FINGER_SWIPE_LEFT`, or `InstabugInvocationEvent.NONE`.
-
-4.  Make sure the following snippet is added to your project level `build.gradle`, if not you can manually add it as follows:.
-
-```dart
-allprojects {
-    repositories {
-        maven {
-            url "https://sdks.instabug.com/nexus/repository/instabug-cp"
-        }
-    }
-}
-```
-
-⚠️ Starting from Instabug-Cordova v9, we require the `compileSdkVersion` to be set to a minimum of `29`. It can be set inside the app's `build.gradle` file as below:  
-
-	android {
-	    compileSdkVersion 29
-	}
-
-## iOS Integration Steps
-
-You can initialize the SDK by using this method in your App JS file.
-
-```
-cordova.plugins.instabug.activate(
-    {
-        ios: 'MY_IOS_TOKEN'
-    },
-    'shake',
-    {
-    	commentRequired: true,
-    	colorTheme: 'light'
-    },
+Instabug.start(
+    'YOUR_CORDOVA_TOKEN',
+    [BugReporting.invocationEvents.button],
     function () {
@@ -75,8 +44,6 @@ console.log('Instabug initialized.');
 
-You can change the invocation event with any of the following: `'button'`, `'screenshot'`, `'swipe'`, or `'shake'`.
+- Replace `YOUR_CORDOVA_TOKEN` with your application token.
 
-⚠️  TypeScript users, make sure you declare `cordova` at the beginning of your app class (app.component.ts):
+> :warning:  If you're updating the SDK from versions prior to v11, please check our [migration guide](https://docs.instabug.com/docs/cordova-migration-guide).
 
-	declare let cordova: any;
-
 ## Features Not Yet Supported
@@ -94,2 +61,2 @@ - User steps.
 
-© 2016 Instabug. All rights reserved.
+© 2022 Instabug. All rights reserved.

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Major refactor

Supply chain risk

Package has recently undergone a major refactor. It may be unstable or indicate significant internal changes. Use caution when updating to versions that include significant changes.

Found 1 instance in 1 package

New author

Supply chain risk

A new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Shell access

Supply chain risk

This module accesses the system shell. Accessing the system shell increases the risk of executing arbitrary code.

Found 1 instance in 1 package

Uses eval

Supply chain risk

Package uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Found 1 instance in 1 package

Dynamic require

Supply chain risk

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 8 instances in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 2 instances in 1 package

Improved metrics

Dependency count

0

decreased by-100%

Number of low supply chain risk alerts

0

decreased by-100%

Number of medium supply chain risk alerts

2

decreased by-77.78%

Worsened metrics

Total package byte prevSize

158535

decreased by-99.83%

Number of package files

18

decreased by-96.77%

Lines of code

974

decreased by-95.61%

Number of lines in readme file

60

decreased by-35.48%

Dependency changes

• - Removedxcode@^0.9.0

• - Removedbase64-js@1.1.2(transitive)

• - Removedbig-integer@1.6.52(transitive)

• - Removedbplist-creator@0.0.7(transitive)

• - Removedbplist-parser@0.1.1(transitive)

• - Removedpegjs@0.10.0(transitive)

• - Removedplist@2.0.1(transitive)

• - Removedsimple-plist@0.2.1(transitive)

• - Removedstream-buffers@2.2.0(transitive)

• - Removeduuid@3.0.1(transitive)

• - Removedxcode@0.9.3(transitive)

• - Removedxmlbuilder@8.2.2(transitive)

• - Removedxmldom@0.1.31(transitive)