nexus - npm Package Compare versions

Comparing version 0.4.3 to 0.5.0

package.json

 {
   "name": "nexus",
-  "version": "0.4.3",
-  "main": "./lib/index.js",
+  "version": "0.5.0",
+  "main": "dist/index.js",
+  "types": "dist/index.d.ts",
+  "license": "MIT",
+  "description": "Scalable, strongly typed GraphQL schema development",
+  "scripts": {
+    "dev": "yarn link-examples && tsc -w",
+    "test": "jest",
+    "build": "tsc",
+    "lint": "tslint -p tsconfig.json",
+    "clean": "rm -rf dist",
+    "prepublish": "yarn clean && yarn lint && yarn build",
+    "website": "cd website && yarn && yarn start",
+    "examples": "yarn link-examples && cd website && gulp run-examples",
+    "link-examples": "cd website && yarn && gulp link-examples",
+    "unlink-examples": "cd website && yarn && gulp unlink-examples",
+    "upgrade-deps": "cd website && yarn && gulp upgrade-deps",
+    "ts-ast-reader": "cd examples/ts-ast-reader && yarn start"
+  },
   "files": [
-    "lib"
+    "src",
+    "dist",
+    "LICENSE.md",
+    "README.md",
+    "yarn.lock"
   ],
+  "author": {
+    "name": "Tim Griesser",
+    "url": "https://github.com/tgriesser"
+  },
   "dependencies": {
-    "debug": "^3.1.0",
-    "hat": "^0.0.3",
-    "is-empty": "^1.2.0",
-    "lodash": "^4.17.4",
-    "p-defer": "^1.0.0",
-    "p-immediate": "^2.1.0"
+    "tslib": "^1.9.3"
   },
   "devDependencies": {
-    "babel-cli": "^6.10.1"
+    "@types/graphql": "14.0.3",
+    "@types/jest": "^23.3.7",
+    "@types/node": "^10.12.2",
+    "@types/prettier": "^1.13.2",
+    "graphql": "^14.0.2",
+    "husky": "^1.1.2",
+    "jest": "^23.6.0",
+    "lint-staged": "^7.3.0",
+    "prettier": "^1.14.3",
+    "ts-jest": "^23.10.4",
+    "ts-node": "^7.0.1",
+    "tslint": "^5.11.0",
+    "tslint-config-prettier": "^1.15.0",
+    "typescript": "^3.1.3"
   },
-  "scripts": {
-    "build": "babel --out-dir ./lib ./src",
-    "clean": "rm -rf ./dist ./lib ./node_modules",
-    "prepublish": "yarn run build",
-    "watch": "babel --out-dir ./lib ./src --watch --source-maps inline"
+  "peerDependencies": {
+    "graphql": "^0.12.0 || ^0.13.0 || ^14.0.0"
+  },
+  "husky": {
+    "hooks": {
+      "pre-commit": "lint-staged"
+    }
+  },
+  "lint-staged": {
+    "*.{js,json,css,md}": [
+      "prettier --write",
+      "git add"
+    ]
   }
 }

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Major refactor

Supply chain risk

Package has recently undergone a major refactor. It may be unstable or indicate significant internal changes. Use caution when updating to versions that include significant changes.

Found 1 instance in 1 package

New author

Supply chain risk

A new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.

Found 1 instance in 1 package

Dynamic require

Supply chain risk

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 1 instance in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Network access

Supply chain risk

This module accesses the network.

Found 1 instance in 1 package

No README

Quality

Package does not have a README. This may indicate a failed publish or a low quality package.

Found 1 instance in 1 package

No contributors or author data

Maintenance

Package does not specify a list of contributors or an author in package.json.

Found 1 instance in 1 package

No License Found

License

(Experimental) License information could not be found.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

519004

increased by329.44%

Dependency count

2

decreased by-66.67%

Number of package files

54

increased by315.38%

Number of low license alerts

0

decreased by-100%

Lines of code

7774

increased by150.29%

Number of low maintenance alerts

1

decreased by-50%

Number of medium quality alerts

0

decreased by-100%

Number of lines in readme file

24

increased byInfinity%

Worsened metrics

Dev dependency count

14

increased by1300%

Number of low supply chain risk alerts

6

increased by500%

Dependency changes

• + Addedtslib@^1.9.3

• + Addedgraphql@14.7.0(transitive)

• + Addediterall@1.3.0(transitive)

• + Addedtslib@1.14.1(transitive)

• - Removeddebug@^3.1.0

• - Removedhat@^0.0.3

• - Removedis-empty@^1.2.0

• - Removedlodash@^4.17.4

• - Removedp-defer@^1.0.0

• - Removedp-immediate@^2.1.0

• - Removeddebug@3.2.7(transitive)

• - Removedhat@0.0.3(transitive)

• - Removedis-empty@1.2.0(transitive)

• - Removedlodash@4.17.21(transitive)

• - Removedms@2.1.3(transitive)

• - Removedp-defer@1.0.0(transitive)

• - Removedp-immediate@2.1.0(transitive)