nopt - npm Package Compare versions

Comparing version 6.0.0 to 7.0.0

package.json

 {
   "name": "nopt",
-  "version": "6.0.0",
+  "version": "7.0.0",
   "description": "Option parsing for Node, supporting types, shorthands, etc. Used by npm.",
@@ -8,5 +8,2 @@ "author": "GitHub Inc.",
   "scripts": {
-    "preversion": "npm test",
-    "postversion": "npm publish",
-    "prepublishOnly": "git push origin --follow-tags",
     "test": "tap",
@@ -29,7 +26,7 @@ "lint": "eslint \"**/*.js\"",
   "dependencies": {
-    "abbrev": "^1.0.0"
+    "abbrev": "^2.0.0"
   },
   "devDependencies": {
-    "@npmcli/eslint-config": "^3.0.1",
-    "@npmcli/template-oss": "3.5.0",
+    "@npmcli/eslint-config": "^4.0.0",
+    "@npmcli/template-oss": "4.8.0",
     "tap": "^16.3.0"
@@ -41,3 +38,7 @@ },
     "branches": 81,
-    "statements": 87
+    "statements": 87,
+    "nyc-arg": [
+      "--exclude",
+      "tap-snapshots/**"
+    ]
   },
@@ -49,3 +50,3 @@ "files": [
   "engines": {
-    "node": "^12.13.0 || ^14.15.0 || >=16.0.0"
+    "node": "^14.17.0 || ^16.13.0 || >=18.0.0"
   },
@@ -55,4 +56,4 @@ "templateOSS": {
     "windowsCI": false,
-    "version": "3.5.0"
+    "version": "4.8.0"
   }
 }

New alerts

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 1 instance in 1 package

Fixed alerts

New author

Supply chain risk

A new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 2 instances in 1 package

Improved metrics

Number of medium supply chain risk alerts

0

decreased by-100%

Worsened metrics

Total package byte prevSize

23895

decreased by-0.21%

Number of low supply chain risk alerts

4

increased by100%

Dependency changes

• + Addedabbrev@2.0.0(transitive)

• - Removedabbrev@1.1.1(transitive)

• Updatedabbrev@^2.0.0