logrocket-cli - npm Package Compare versions

Comparing version 0.15.0 to 0.15.1

dist/fetch.js

+'use strict';
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+
+var _nodeFetch = require('node-fetch');
+
+var _nodeFetch2 = _interopRequireDefault(_nodeFetch);
+
+function _interopRequireDefault(obj) { return obj && obj.__esModule ? obj : { default: obj }; }
+
+if (!global.fetch) {
+  global.fetch = _nodeFetch2.default;
+  global.Headers = _nodeFetch2.default.Headers;
+  global.Request = _nodeFetch2.default.Request;
+  global.Response = _nodeFetch2.default.Response;
+}
+
+exports.default = global.fetch;
+module.exports = exports['default'];

dist/apiClient.js

@@ -113,3 +113,3 @@ 'use strict';
 
-require('isomorphic-fetch');
+require('./fetch');
 
@@ -116,0 +116,0 @@ var _package = require('../package.json');

package.json

 {
   "name": "logrocket-cli",
-  "version": "0.15.0",
+  "version": "0.15.1",
   "description": "Command line tool for [LogRocket](https://logrocket.com/).",
@@ -28,4 +28,4 @@ "main": "index.js",
     "glob": "^7.1.1",
-    "isomorphic-fetch": "^2.1.1",
-    "yargs": "^5.0.0"
+    "node-fetch": "^2.7.0",
+    "yargs": "^6.0.0"
   },
@@ -32,0 +32,0 @@ "devDependencies": {

dist/executeFetch.js

-"use strict";
-
-Object.defineProperty(exports, "__esModule", {
-  value: true
-});
-exports.executeFetch = executeFetch;
-async function executeFetch(url, options) {
-  let result = await fetch(url, options);
-  return result;
-}

New alerts

Network access

Supply chain risk

This module accesses the network.

Found 1 instance in 1 package

New author

Supply chain risk

A new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.

Found 1 instance in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

Fixed alerts

Network access

Supply chain risk

This module accesses the network.

Found 1 instance in 1 package

New author

Supply chain risk

A new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.

Found 1 instance in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

75655

0.42%

Lines of code

1633

0.37%

Worsened metrics

Number of medium supply chain risk alerts

11

37.5%

Dependency changes

• + Added

  node-fetch@^2.7.0

• + Added

  node-fetch@2.7.0
  (transitive)

• + Added

  tr46@0.0.3
  (transitive)

• + Added

  webidl-conversions@3.0.1
  (transitive)

• + Added

  whatwg-url@5.0.0
  (transitive)

• + Added

  yargs@6.6.0
  (transitive)

• + Added

  yargs-parser@4.2.1
  (transitive)

• - Removed

  isomorphic-fetch@^2.1.1

• - Removed

  encoding@0.1.13
  (transitive)

• - Removed

  iconv-lite@0.6.3
  (transitive)

• - Removed

  is-stream@1.1.0
  (transitive)

• - Removed

  isomorphic-fetch@2.2.1
  (transitive)

• - Removed

  lodash.assign@4.2.0
  (transitive)

• - Removed

  node-fetch@1.7.3
  (transitive)

• - Removed

  safer-buffer@2.1.2
  (transitive)

• - Removed

  whatwg-fetch@3.6.20
  (transitive)

• - Removed

  window-size@0.2.0
  (transitive)

• - Removed

  yargs@5.0.0
  (transitive)

• - Removed

  yargs-parser@3.2.0
  (transitive)

• Updated

  yargs@^6.0.0