mendel-deps - npm Package Compare versions

Comparing version 3.0.0 to 3.1.0-beta1

package.json

 {
   "name": "mendel-deps",
-  "version": "3.0.0",
+  "version": "3.1.0-beta1",
   "description": "Depedency detector based on AST. Supports custom cache and custom resolver.",
@@ -18,3 +18,3 @@ "main": "src/deps.js",
     "acorn-jsx": "^3.0.1",
-    "ast-types": "^0.9.0"
+    "ast-types": "^0.9.11"
   },
@@ -24,3 +24,3 @@ "devDependencies": {
     "tap": "^7.1.2",
-    "mendel-resolver": "3.0.0"
+    "mendel-resolver": "^3.0.0"
   },
@@ -27,0 +27,0 @@ "files": [

src/deps.js

 const acorn = require('acorn-jsx/inject')(require('acorn'));
 const {visit} = require('ast-types');
-const GLOBAL_WHITELIST = ['process'];
+// `console` is not included as it works flawlessly in Node and browser.
+const GLOBAL_WHITELIST = [
+    'global',
+    'process',
+];
 
@@ -36,3 +40,2 @@ // {
         visitMemberExpression(nodePath) {
-            // console.log(nodePath.parentPath.node)
             const node = nodePath.value;
@@ -39,0 +42,0 @@ if (node.object.type === 'Identifier' &&

New alerts

New author

Supply chain risk

A new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.

Found 1 instance in 1 package

No v1

Quality

Package is not semver >=1. This means it is not stable and does not support ^ ranges.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

4623

increased by1.07%

Lines of code

113

increased by2.73%

Worsened metrics

Number of low quality alerts

2

increased by100%

Number of medium supply chain risk alerts

1

increased byInfinity%

Dependency changes

• Updatedast-types@^0.9.11