msgpackr-extract - npm Package Compare versions

Comparing version 1.1.0-napi to 1.1.0

index.js

@@ -1,1 +0,1 @@
-module.exports = require('node-gyp-build')(__dirname)
+module.exports = require('node-gyp-build')(__dirname);

package.json

 {
   "name": "msgpackr-extract",
   "author": "Kris Zyp",
-  "version": "1.1.0-napi",
+  "version": "1.1.0",
   "description": "Node addon for string extraction for msgpackr",
@@ -14,6 +14,8 @@ "license": "MIT",
     "recompile": "node-gyp build",
-    "before-publish": "prebuildify-ci download && prebuildify --napi --target 12.22.7",
-    "prebuild": "prebuildify --napi --target 12.22.7",
-    "prebuild-musl": "prebuildify --napi --libc musl --tag-libc --target 12.22.7",
-    "prebuild-arm64": "prebuildify --napi --arch=arm64 --tag-libc --target 12.22.7",    "test": ""
+    "before-publish": "prebuildify-ci download && prebuildify --target 16.14.2 && set ENABLE_V8_FUNCTIONS=false&& prebuildify --optional-packages --napi --target 16.14.2 && node set-optional-deps.cjs",
+    "prebuild": "prebuildify --target 16.14.2",
+    "prebuild-libc": "prebuildify --tag-libc --target 16.14.2 && ENABLE_V8_FUNCTIONS=false prebuildify --optional-packages --napi --tag-libc --target 16.14.2",
+    "prepublishOnly": "node set-optional-deps.cjs",
+    "publish-all": "cd prebuilds/win32-x64 && npm publish --otp %OTP% && cd ../darwin-x64 && npm publish --otp %OTP% && cd ../darwin-arm64 && npm publish --otp %OTP% && cd ../linux-x64 && npm publish --otp %OTP% && cd ../linux-arm64 && npm publish --otp %OTP%  && cd ../linux-arm && npm publish --otp %OTP% && cd ../.. && npm publish --otp %OTP%",
+    "test": "node ./index.js"
   },
@@ -23,9 +25,21 @@ "main": "./index.js",
   "dependencies": {
-    "node-addon-api": "^4.3.0",
-    "node-gyp-build": "^4.2.3"
+    "node-gyp-build": "kriszyp/node-gyp-build#optional-packages"
   },
+  "files": [
+    "index.js",
+    "/src",
+    "/*.gyp"
+  ],
+  "optionalDependencies": {
+    "msgpackr-extract-darwin-arm64": "1.1.0",
+    "msgpackr-extract-darwin-x64": "1.1.0",
+    "msgpackr-extract-linux-arm": "1.1.0",
+    "msgpackr-extract-linux-arm64": "1.1.0",
+    "msgpackr-extract-linux-x64": "1.1.0",
+    "msgpackr-extract-win32-x64": "1.1.0"
+  },
   "devDependencies": {
-    "prebuildify": "^5.0.0",
+    "prebuildify": "kriszyp/prebuildify#optional-packages",
     "prebuildify-ci": "^1.0.5"
   }
-}
+}

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

GitHub dependency

Supply chain risk

Contains a dependency which resolves to a GitHub URL. Dependencies fetched from GitHub specifiers are not immutable can be used to inject untrusted code or reduce the likelihood of a reproducible install.

Found 1 instance in 1 package

Empty package

Supply chain risk

Package does not contain any code. It may be removed, is name squatting, or the result of a faulty package publish.

Found 1 instance in 1 package

Manifest confusion

Supply chain risk

This package has inconsistent metadata. This could be malicious or caused by an error when publishing the package.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Native code

Supply chain risk

Contains native code (e.g., compiled binaries or shared libraries). Including native code can obscure malicious behavior.

Found 6 instances in 1 package

No tests

Quality

Package does not have any tests. This is a strong signal of a poorly maintained or low quality package.

Found 1 instance in 1 package

No v1

Quality

Package is not semver >=1. This means it is not stable and does not support ^ ranges.

Found 1 instance in 1 package

Improved metrics

Number of low quality alerts

1

decreased by-66.67%

Number of medium supply chain risk alerts

3

decreased by-57.14%

Worsened metrics

Total package byte prevSize

15055

decreased by-98.37%

Dependency count

7

increased by250%

Number of package files

6

decreased by-62.5%

Lines of code

0

decreased by-100%

Number of high supply chain risk alerts

1

increased byInfinity%

Dependency changes

• + Addedmsgpackr-extract-darwin-arm64@1.1.0(transitive)

• + Addedmsgpackr-extract-darwin-x64@1.1.0(transitive)

• + Addedmsgpackr-extract-linux-arm@1.1.0(transitive)

• + Addedmsgpackr-extract-linux-arm64@1.1.0(transitive)

• + Addedmsgpackr-extract-linux-x64@1.1.0(transitive)

• + Addedmsgpackr-extract-win32-x64@1.1.0(transitive)

• - Removednode-addon-api@^4.3.0

• - Removednode-addon-api@4.3.0(transitive)

• - Removednode-gyp-build@4.8.2(transitive)

• Updatednode-gyp-build@kriszyp/node-gyp-build#optional-packages