jsxgettext - npm Package Compare versions

Comparing version 0.0.4 to 0.0.5

lib/jsxgettext.js

@@ -12,5 +12,6 @@ #!/usr/bin/env node
 const escodegen = require('escodegen');
+const estraverse = require('estraverse');
 
 const generate = escodegen.generate;
-const traverse = escodegen.traverse;
+const traverse = estraverse.traverse;
 
@@ -17,0 +18,0 @@ const parse_po = require('./parse_po');

package.json

@@ -5,3 +5,3 @@ {
   "description": "Extract gettext calls from JavaScript and EJS files",
-  "version": "0.0.4",
+  "version": "0.0.5",
   "main": "lib/jsxgettext.js",
@@ -13,2 +13,3 @@ "bin": "lib/cli.js",
     "esprima": ">=0.9.9",
+    "estraverse": ">=1.1.1",
     "nomnom": "1.5.2"
@@ -15,0 +16,0 @@ },

New alerts

New author

Supply chain risk

A new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.

Found 1 instance in 1 package

Fixed alerts

Non-existent author

Supply chain risk

The package was published by an npm account that no longer exists.

Found 1 instance in 1 package

Improved metrics

Lines of code

590

increased by0.17%

Number of high supply chain risk alerts

0

decreased by-100%

Worsened metrics

Total package byte prevSize

25176

decreased by-5.09%

Dependency count

4

increased by33.33%

Number of package files

20

decreased by-9.09%

Number of medium supply chain risk alerts

1

increased byInfinity%

Dependency changes

• + Addedestraverse@>=1.1.1