node-red-contrib-niu-cloud - npm Package Compare versions

Comparing version 1.0.0 to 1.0.1

CHANGELOG.md

@@ -9,2 +9,9 @@ # Changelog
 
+## [1.0.1] - 2023-02-07
+### Changed
+
+- Updated dependencies for security reasons
+- Provided examples
+- Compatibility with Scorecard
+
 ## 1.0.0 - 2021-09-09
@@ -27,3 +34,4 @@ ### Added
 
-[Unreleased]: https://github.com/gablau/node-red-contrib-niu-cloud/compare/1.0.0...HEAD
+[Unreleased]: https://github.com/gablau/node-red-contrib-niu-cloud/compare/1.0.1...HEAD
+[1.0.1]: https://github.com/gablau/node-red-contrib-blynk-ws/compare/1.0.0...1.0.1
 

package.json

 {
   "name": "node-red-contrib-niu-cloud",
-  "version": "1.0.0",
+  "version": "1.0.1",
   "description": "A Node-RED library for connect to NIU Cloud for your electric scooter",
@@ -13,10 +13,10 @@ "scripts": {
   "dependencies": {
-    "niu-cloud-connector": "github:gablau/niu-cloud-connector#afb1c60e9eea1a2f0b47c8b668ecfdbe8f2706aa"
+    "niu-cloud-connector": "github:gablau/niu-cloud-connector#79a55d88d9d82b5c742fec04aae451481f5337ff"
   },
   "devDependencies": {
-    "eslint": "^6.x.x",
-    "eslint-config-airbnb-base": "^14.x.x",
-    "eslint-plugin-html": "^6.0.0",
-    "eslint-plugin-import": "^2.x.x",
-    "eslint-plugin-json": "^1.4.0",
+    "eslint": "^8.x.x",
+    "eslint-config-airbnb-base": "^15.x.x",
+    "eslint-plugin-html": "^7.x.x",
+    "eslint-plugin-import": "^2.26.x",
+    "eslint-plugin-json": "^3.x.x",
     "eslint-plugin-progress": "github:gablau/eslint-plugin-progress"
@@ -35,2 +35,3 @@ },
   "node-red": {
+    "version": ">=2.0.0",
     "nodes": {
@@ -40,3 +41,6 @@ "niu-cloud-client": "niu-cloud-client.js",
     }
+  },
+  "engines": {
+    "node": ">=12.22.12"
   }
 }

SECURITY.md

@@ -7,3 +7,4 @@ # Security Policy
 | ------- | ------------------ |
-| 1.0.0   | Yes |
+| 1.0.1   | Yes |
+| <= 1.0.0   | No |
 
@@ -10,0 +11,0 @@ ## Reporting a Vulnerability

New alerts

GitHub dependency

Supply chain risk

Contains a dependency which resolves to a GitHub URL. Dependencies fetched from GitHub specifiers are not immutable can be used to inject untrusted code or reduce the likelihood of a reproducible install.

Found 1 instance in 1 package

Fixed alerts

GitHub dependency

Supply chain risk

Contains a dependency which resolves to a GitHub URL. Dependencies fetched from GitHub specifiers are not immutable can be used to inject untrusted code or reduce the likelihood of a reproducible install.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

42596

increased by34.59%

Number of package files

13

increased by8.33%

Lines of code

941

increased by100.21%

Dependency changes

• Updatedniu-cloud-connector@github:gablau/niu-cloud-connector#79a55d88d9d82b5c742fec04aae451481f5337ff