ipx - npm Package Compare versions

Comparing version 0.8.0 to 0.9.0

package.json

 {
   "name": "ipx",
-  "version": "0.8.0",
+  "version": "0.9.0",
   "repository": "unjs/ipx",
@@ -20,6 +20,6 @@ "license": "MIT",
   "scripts": {
-    "build": "siroc build",
+    "build": "unbuild",
     "dev": "nodemon",
     "lint": "eslint --ext .ts .",
-    "prepublishOnly": "yarn build",
+    "prepack": "yarn build",
     "release": "yarn test && standard-version && git push --follow-tags && npm publish",
@@ -34,10 +34,10 @@ "start": "node bin/ipx.js",
     "etag": "^1.8.1",
-    "fs-extra": "^10.0.0",
-    "image-meta": "^0.0.1",
+    "image-meta": "^0.1.1",
     "is-valid-path": "^0.1.1",
-    "listhen": "^0.2.4",
-    "node-fetch": "^2.6.1",
+    "listhen": "^0.2.5",
+    "ohmyfetch": "^0.4.2",
+    "pathe": "^0.2.0",
     "sharp": "^0.29.0",
     "ufo": "^0.7.9",
-    "xss": "^1.0.9"
+    "xss": "^1.0.10"
   },
@@ -47,3 +47,2 @@ "devDependencies": {
     "@types/etag": "latest",
-    "@types/fs-extra": "latest",
     "@types/is-valid-path": "latest",
@@ -57,7 +56,7 @@ "@types/jest": "latest",
     "nodemon": "latest",
-    "siroc": "latest",
     "standard-version": "latest",
     "ts-jest": "latest",
-    "typescript": "latest"
+    "typescript": "latest",
+    "unbuild": "latest"
   }
 }

README.md

@@ -9,3 +9,3 @@ # IPX
 
-<h2 align="center">Usage</h2>
+## Usage
 
@@ -89,4 +89,4 @@ ### Quick Start
 
-<h2 align="center">License</h2>
+## License
 
 MIT

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

Improved metrics

Dev dependency count

14

decreased by-6.67%

Number of low supply chain risk alerts

7

decreased by-30%

Number of medium supply chain risk alerts

5

decreased by-44.44%

Worsened metrics

Total package byte prevSize

39226

decreased by-39.36%

Number of package files

6

decreased by-25%

Lines of code

1096

decreased by-33.41%

Dependency changes

• + Addedohmyfetch@^0.4.2

• + Addedpathe@^0.2.0

• + Added@fastify/busboy@2.1.1(transitive)

• + Addedimage-meta@0.1.1(transitive)

• + Addednode-fetch-native@0.1.8(transitive)

• + Addedohmyfetch@0.4.21(transitive)

• + Addedpathe@0.2.0(transitive)

• + Addedundici@5.28.4(transitive)

• - Removedfs-extra@^10.0.0

• - Removednode-fetch@^2.6.1

• - Removedfs-extra@10.1.0(transitive)

• - Removedgraceful-fs@4.2.11(transitive)

• - Removedimage-meta@0.0.1(transitive)

• - Removedjsonfile@6.1.0(transitive)

• - Removednode-fetch@2.7.0(transitive)

• - Removedtr46@0.0.3(transitive)

• - Removeduniversalify@2.0.1(transitive)

• - Removedwebidl-conversions@3.0.1(transitive)

• - Removedwhatwg-url@5.0.0(transitive)

• Updatedimage-meta@^0.1.1

• Updatedlisthen@^0.2.5

• Updatedxss@^1.0.10