locize-cli - npm Package Compare versions

Comparing version 7.14.5 to 7.14.6

CHANGELOG.md

@@ -8,2 +8,6 @@ # locize-cli change log
 
+## [7.14.6](https://github.com/locize/locize-cli/compare/v7.14.5...v7.14.6) - 2023-05-24
+
+- update xlsx dependency
+
 ## [7.14.5](https://github.com/locize/locize-cli/compare/v7.14.4...v7.14.5) - 2023-05-24
@@ -10,0 +14,0 @@

package.json

 {
   "name": "locize-cli",
-  "version": "7.14.5",
+  "version": "7.14.6",
   "description": "locize cli to import locales",
@@ -34,3 +34,3 @@ "main": "index.js",
     "xliff": "6.1.0",
-    "xlsx": "0.18.5"
+    "xlsx": "https://cdn.sheetjs.com/xlsx-0.19.3/xlsx-0.19.3.tgz"
   },
@@ -37,0 +37,0 @@ "devDependencies": {

New alerts

HTTP dependency

Supply chain risk

Contains a dependency which resolves to a remote HTTP URL which could be used to inject untrusted code and reduce overall package reliability.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

175948

increased by0.09%

Worsened metrics

Number of high supply chain risk alerts

1

increased byInfinity%

Dependency changes

• - Removedadler-32@1.3.1(transitive)

• - Removedcfb@1.2.2(transitive)

• - Removedcodepage@1.15.0(transitive)

• - Removedcrc-32@1.2.2(transitive)

• - Removedfrac@1.1.2(transitive)

• - Removedssf@0.11.2(transitive)

• - Removedwmf@1.0.2(transitive)

• - Removedword@0.3.0(transitive)

• - Removedxlsx@0.18.5(transitive)

• Updatedxlsx@https://cdn.sheetjs.com/xlsx-0.19.3/xlsx-0.19.3.tgz