jskos-tools - npm Package Compare versions

Comparing version 1.0.11 to 1.0.12

package.json

 {
   "name": "jskos-tools",
-  "version": "1.0.11",
+  "version": "1.0.12",
   "description": "Tools for working with the JSKOS data format.",
@@ -53,2 +53,3 @@ "homepage": "https://github.com/gbv/jskos-tools",
     "lint-staged": "^10.2.11",
+    "lodash": "^4.17.20",
     "mocha": "^7.2.0",
@@ -60,5 +61,3 @@ "mocha-eslint": "^6.0.0",
   },
-  "dependencies": {
-    "lodash": "^4.17.19"
-  }
+  "dependencies": {}
 }

README.md

@@ -72,7 +72,9 @@ # JSKOS Tools
 ```bash
-git clone https://github.com/gbv/jskos-tools.git
-cd jskos-tools
 npm i jskos-tools
 ```
 
+We are also providing browser bundles:
+- Development (not minified, ~68K): https://cdn.jsdelivr.net/npm/jskos-tools/dist/jskos-tools.js
+- Production (minified, ~26K): https://cdn.jsdelivr.net/npm/jskos-tools@1
+
 ## Usage
@@ -85,9 +87,4 @@ If you installed jskos-tools via npm, use it like this:
 
-We are also providing browser bundles:
-- Development (not minified, ~190K): https://cdn.jsdelivr.net/npm/jskos-tools/dist/jskos-tools.js
-- Production (minified, ~66K): https://cdn.jsdelivr.net/npm/jskos-tools/
-  - It is recommended to pin the version to the desired major version number, e.g.: https://cdn.jsdelivr.net/npm/jskos-tools@1
+Using the browser bundles will provide you with the `jskos` global variable.
 
-Including these bundles will provide you with the `jskos` global variable.
-
 See <https://gbv.github.io/jskos-tools/> for full API documentation of
@@ -451,8 +448,19 @@ [module jskos-tools](https://gbv.github.io/jskos-tools/module-jskos-tools.html).
 ## Publish
+Please work on the `dev` branch during development (or better yet, develop in a feature branch and merge into `dev` when ready).
 
-To publish a new version on npm after committing your changes, follow these steps:
+When a new release is ready (i.e. the features are finished, merged into `dev`, and all tests succeed), follow these steps:
 
 ```bash
-npm version patch # or minor, or major
+# Increment version (patch/minor/major)
+npm version patch
+# Push dev (without tags!)
+git push
+# Switch to master branch
+git checkout master
+# Merge dev (should fast-forward merge)
+git merge dev
+# Push masater (including tags)
 git push --tags origin master
+# Switch back to dev (don't accidentally work on master)
+git checkout dev
 ```
@@ -459,0 +467,0 @@

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Major refactor

Supply chain risk

Package has recently undergone a major refactor. It may be unstable or indicate significant internal changes. Use caution when updating to versions that include significant changes.

Found 1 instance in 1 package

Improved metrics

Dependency count

0

decreased by-100%

Number of lines in readme file

476

increased by1.71%

Number of medium supply chain risk alerts

0

decreased by-100%

Worsened metrics

Total package byte prevSize

87492

decreased by-58.87%

Dev dependency count

20

increased by5.26%

Lines of code

2017

decreased by-65.27%

Dependency changes

• - Removedlodash@^4.17.19

• - Removedlodash@4.17.21(transitive)