meow - npm Package Compare versions

Comparing version 10.1.4 to 12.1.1

package.json

 {
 	"name": "meow",
-	"version": "10.1.4",
+	"version": "12.1.1",
 	"description": "CLI app helper",
@@ -14,12 +14,17 @@ "license": "MIT",
 	"type": "module",
-	"exports": "./index.js",
+	"exports": {
+		"types": "./build/index.d.ts",
+		"default": "./build/index.js"
+	},
+	"sideEffects": false,
 	"engines": {
-		"node": "^12.20.0 || ^14.13.1 || >=16.0.0"
+		"node": ">=16.10"
 	},
 	"scripts": {
-		"test": "xo && ava && tsd"
+		"prepare": "npm run build",
+		"build": "rollup --config",
+		"test": "xo && npm run build && ava && tsd --typings build/index.d.ts"
 	},
 	"files": [
-		"index.js",
-		"index.d.ts"
+		"build"
 	],
@@ -45,28 +50,54 @@ "keywords": [
 	],
-	"dependencies": {
+	"_actualDependencies": [
+		"@types/minimist",
+		"camelcase-keys",
+		"decamelize",
+		"decamelize-keys",
+		"hard-rejection",
+		"minimist-options",
+		"normalize-package-data",
+		"read-pkg-up",
+		"redent",
+		"trim-newlines",
+		"type-fest",
+		"yargs-parser"
+	],
+	"devDependencies": {
+		"@rollup/plugin-commonjs": "^25.0.3",
+		"@rollup/plugin-json": "^6.0.0",
+		"@rollup/plugin-node-resolve": "^15.1.0",
 		"@types/minimist": "^1.2.2",
-		"camelcase-keys": "^7.0.0",
-		"decamelize": "^5.0.0",
-		"decamelize-keys": "^1.1.0",
+		"ava": "^5.3.1",
+		"camelcase-keys": "^8.0.2",
+		"common-tags": "^2.0.0-alpha.1",
+		"decamelize": "^6.0.0",
+		"decamelize-keys": "^2.0.1",
+		"delete_comments": "^0.0.2",
+		"execa": "^7.2.0",
+		"globby": "^13.2.2",
 		"hard-rejection": "^2.1.0",
+		"indent-string": "^5.0.0",
 		"minimist-options": "4.1.0",
-		"normalize-package-data": "^3.0.2",
-		"read-pkg-up": "^8.0.0",
+		"normalize-package-data": "^5.0.0",
+		"read-pkg": "^8.0.0",
+		"read-pkg-up": "^10.0.0",
 		"redent": "^4.0.0",
-		"trim-newlines": "^4.0.2",
-		"type-fest": "^1.2.2",
-		"yargs-parser": "^20.2.9"
+		"rollup": "^3.27.0",
+		"rollup-plugin-dts": "^6.0.0",
+		"rollup-plugin-license": "^3.0.1",
+		"trim-newlines": "^5.0.0",
+		"tsd": "^0.28.1",
+		"type-fest": "^4.3.1",
+		"typescript": "~5.1.6",
+		"xo": "^0.56.0",
+		"yargs-parser": "^21.1.1"
 	},
-	"devDependencies": {
-		"ava": "^3.15.0",
-		"execa": "^6.1.0",
-		"indent-string": "^5.0.0",
-		"read-pkg": "^7.1.0",
-		"tsd": "^0.20.0",
-		"xo": "^0.48.0"
-	},
 	"xo": {
 		"rules": {
-			"unicorn/no-process-exit": "off"
-		}
+			"unicorn/no-process-exit": "off",
+			"unicorn/error-message": "off"
+		},
+		"ignores": [
+			"build"
+		]
 	},
@@ -73,0 +104,0 @@ "ava": {

readme.md

@@ -18,14 +18,15 @@ # meow
 - Sets the process title to the binary name defined in package.json
+- No dependencies!
 
 ## Install
 
+```sh
+npm install meow
 ```
-$ npm install meow
-```
 
 ## Usage
 
+```sh
+./foo-app.js unicorns --rainbow
 ```
-$ ./foo-app.js unicorns --rainbow
-```
 
@@ -52,3 +53,3 @@ ```js
 			type: 'boolean',
-			alias: 'r'
+			shortFlag: 'r'
 		}
@@ -65,3 +66,3 @@ }
 
-foo(cli.input[0], cli.flags);
+foo(cli.input.at(0), cli.flags);
 ```
@@ -109,4 +110,8 @@
 - `type`: Type of value. (Possible values: `string` `boolean` `number`)
-- `alias`: Usually used to define a short flag alias.
+- `choices`: Limit valid values to a predefined set of choices.
 - `default`: Default value when the flag is not specified.
+- `shortFlag`: A short flag alias.
+- `aliases`: Other names for the flag.
+- `isMultiple`: Indicates a flag can be set multiple times. Values are turned into an array. (Default: false)
+	- Multiple values are provided by specifying the flag multiple times, for example, `$ foo -u rainbow -u cat`. Space- or comma-separated values are [currently *not* supported](https://github.com/sindresorhus/meow/issues/164).
 - `isRequired`: Determine if the flag is required. (Default: false)
@@ -117,4 +122,2 @@ - If it's only known at runtime whether the flag is required or not, you can pass a `Function` instead of a `boolean`, which based on the given flags and other non-flag arguments, should decide if the flag is required. Two arguments are passed to the function:
 	- The function should return a `boolean`, true if the flag is required, otherwise false.
-- `isMultiple`: Indicates a flag can be set multiple times. Values are turned into an array. (Default: false)
-	- Multiple values are provided by specifying the flag multiple times, for example, `$ foo -u rainbow -u cat`. Space- or comma-separated values are [currently *not* supported](https://github.com/sindresorhus/meow/issues/164).
 
@@ -129,4 +132,6 @@ Note that flags are always defined using a camel-case key (`myKey`), but will match arguments in kebab-case (`--my-key`).
 		type: 'string',
-		alias: 'u',
+		choices: ['rainbow', 'cat', 'unicorn'],
 		default: ['rainbow', 'cat'],
+		shortFlag: 'u',
+		aliases: ['unicorns'],
 		isMultiple: true,
@@ -186,3 +191,3 @@ isRequired: (flags, input) => {
 
- This option is only considered when there is only one argument in `process.argv`.
+This option is only considered when there is only one argument in `process.argv`.
 
@@ -196,2 +201,4 @@ ##### pkg
 
+Note: Setting this stops `meow` from finding a package.json.
+
 *You most likely don't need this option.*
@@ -253,3 +260,3 @@
 			default: true,
-			alias: 'r'
+			shortFlag: 'r'
 		},
@@ -259,7 +266,7 @@ unicorn: {
 			default: false,
-			alias: 'u'
+			shortFlag: 'u'
 		},
 		cake: {
 			type: 'boolean',
-			alias: 'c'
+			shortFlag: 'c'
 		},
@@ -317,16 +324,2 @@ sparkles: {
 
-See [`update-notifier`](https://github.com/yeoman/update-notifier) if you want update notifications.
-
 [More useful CLI utilities…](https://github.com/sindresorhus/awesome-nodejs#command-line-utilities)
-
----
-
-<div align="center">
-	<b>
-		<a href="https://tidelift.com/subscription/pkg/npm-meow?utm_source=npm-meow&utm_medium=referral&utm_campaign=readme">Get professional support for this package with a Tidelift subscription</a>
-	</b>
-	<br>
-	<sub>
-		Tidelift helps make open source sustainable for maintainers while giving companies<br>assurances about security, maintenance, and licensing for their dependencies.
-	</sub>
-</div>

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Uses eval

Supply chain risk

Package uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Found 1 instance in 1 package

Dynamic require

Supply chain risk

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 4 instances in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

High entropy strings

Supply chain risk

Contains high entropy strings. This could be a sign of encrypted data, leaked secrets or obfuscated code.

Found 1 instance in 1 package

Mixed license

License

(Experimental) Package contains multiple licenses.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

491221

increased by1849.37%

Dependency count

0

decreased by-100%

Number of package files

11

increased by120%

Lines of code

12564

increased by2661.32%

Worsened metrics

Dev dependency count

28

increased by366.67%

Number of low license alerts

1

increased byInfinity%

Number of lines in readme file

315

decreased by-2.17%

Number of low supply chain risk alerts

16

increased by1500%

Number of medium supply chain risk alerts

1

increased byInfinity%