note - npm Package Compare versions

Comparing version 0.1.0 to 0.2.0

cli.js

+#!/usr/bin/env node
+
+import { writeFileSync } from 'fs';
+
+const args = process.argv.slice(2);
+
+if (args.length === 0) {
+  console.log('Usage: npx note <your note here>');
+  process.exit(0);
+}
+
+const noteContent = args.join(' ');
+const date = new Date().toISOString().split('T')[0];
+const slug = noteContent
+  .toLowerCase()
+  .replace(/[^a-z0-9]+/g, '-')
+  .replace(/^-+|-+$/g, '')
+  .substring(0, 50);
+
+const filename = `note-${date}-${slug}.md`;
+const fullContent = `# ${noteContent}\n\nCreated: ${new Date().toISOString()}\n`;
+
+writeFileSync(filename, fullContent, 'utf8');
+console.log(`✅ Created: ${filename}`);

package.json

 {
   "name": "note",
-  "version": "0.1.0",
+  "version": "0.2.0",
   "description": "A note-taking application built with Bun, React, and Tailwind",
   "type": "module",
   "main": "src/index.tsx",
+  "bin": {
+    "note": "./cli.js"
+  },
+  "engines": {
+    "node": ">=14.0.0"
+  },
   "author": "subtleGradient",
@@ -8,0 +14,0 @@ "license": "MIT",

New alerts

Network access

Supply chain risk

This module accesses the network.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 1 instance in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 2 instances in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

Fixed alerts

Deprecated

Maintenance

The maintainer of the package marked it as deprecated. This could indicate that a single version should not be used, or that the package is no longer maintained and any new vulnerabilities will not be fixed.

Found 1 instance in 1 package

Network access

Supply chain risk

This module accesses the network.

Found 1 instance in 1 package

New author

Supply chain risk

A new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 1 instance in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 2 instances in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

20517

3.53%

Number of package files

16

6.67%

Lines of code

363

4.91%

Number of medium maintenance alerts

0

-100%

Number of medium supply chain risk alerts

1

-50%

Worsened metrics

Number of low supply chain risk alerts

6

20%

No dependency changes