mlly - npm Package Compare versions

Comparing version 0.2.10 to 0.3.0

package.json

 {
   "name": "mlly",
-  "version": "0.2.10",
+  "version": "0.3.0",
   "description": "Missing ECMAScript module utils for Node.js",
@@ -9,19 +9,22 @@ "repository": "unjs/mlly",
   "type": "module",
-  "exports": "./lib/index.mjs",
-  "main": "./lib/index.mjs",
-  "types": "./lib/index.d.ts",
+  "exports": {
+    "require": "./dist/index.cjs",
+    "import": "./dist/index.mjs"
+  },
+  "main": "./dist/index.cjs",
+  "module": "./dist/index.mjs",
+  "types": "./dist/index.d.ts",
   "files": [
-    "lib"
+    "dist"
   ],
   "scripts": {
+    "build": "unbuild",
     "lint": "eslint --ext .mjs lib",
-    "release": "yarn test && standard-version && npm publish && git push --follow-tags",
-    "test": "mocha ./test/**/*.test.mjs"
+    "release": "yarn test && yarn build && standard-version && npm publish && git push --follow-tags",
+    "test": "yarn build && mocha ./test/**/*.test.mjs"
   },
-  "dependencies": {
-    "import-meta-resolve": "^1.1.1"
-  },
   "devDependencies": {
     "@nuxtjs/eslint-config": "latest",
     "@types/node": "latest",
+    "import-meta-resolve": "^1.1.1",
     "chai": "^4.3.4",
@@ -31,4 +34,5 @@ "eslint": "latest",
     "mocha": "^9.1.2",
-    "standard-version": "latest"
+    "standard-version": "latest",
+    "unbuild": "^0.5.7"
   }
 }

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Major refactor

Supply chain risk

Package has recently undergone a major refactor. It may be unstable or indicate significant internal changes. Use caution when updating to versions that include significant changes.

Found 1 instance in 1 package

Debug access

Supply chain risk

Uses debug, reflection and dynamic code execution features.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 2 instances in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Major refactor

Supply chain risk

Package has recently undergone a major refactor. It may be unstable or indicate significant internal changes. Use caution when updating to versions that include significant changes.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

252795

increased by1063.88%

Dependency count

0

decreased by-100%

Lines of code

8014

increased by2183.19%

Worsened metrics

Dev dependency count

9

increased by28.57%

Number of package files

6

decreased by-45.45%

Number of low supply chain risk alerts

13

increased by550%

Dependency changes

• - Removedimport-meta-resolve@^1.1.1

• - Removedbuiltins@4.1.0(transitive)

• - Removedimport-meta-resolve@1.1.1(transitive)

• - Removedsemver@7.6.3(transitive)