npm-package-arg - npm Package Compare versions

Comparing version 8.1.5 to 9.0.0

package.json

 {
   "name": "npm-package-arg",
-  "version": "8.1.5",
+  "version": "9.0.0",
   "description": "Parse the things that can be arguments to `npm install`",
-  "main": "npa.js",
+  "main": "./lib/npa.js",
   "directories": {
@@ -10,12 +10,13 @@ "test": "test"
   "files": [
-    "npa.js"
+    "bin",
+    "lib"
   ],
   "dependencies": {
-    "hosted-git-info": "^4.0.1",
-    "semver": "^7.3.4",
+    "hosted-git-info": "^4.1.0",
+    "semver": "^7.3.5",
     "validate-npm-package-name": "^3.0.0"
   },
   "devDependencies": {
-    "@npmcli/lint": "^1.0.1",
-    "tap": "^15.0.9"
+    "@npmcli/template-oss": "^2.7.1",
+    "tap": "^15.1.6"
   },
@@ -29,6 +30,8 @@ "scripts": {
     "npmclilint": "npmcli-lint",
-    "lint": "npm run npmclilint -- \"*.*js\" \"test/**/*.*js\"",
+    "lint": "eslint '**/*.js'",
     "lintfix": "npm run lint -- --fix",
-    "posttest": "npm run lint --",
-    "postsnap": "npm run lintfix --"
+    "posttest": "npm run lint",
+    "postsnap": "npm run lintfix --",
+    "postlint": "npm-template-check",
+    "template-copy": "npm-template-copy --force"
   },
@@ -39,3 +42,3 @@ "repository": {
   },
-  "author": "Isaac Z. Schlueter <[e-mail]> (http://blog.izs.me/)",
+  "author": "GitHub Inc.",
   "license": "ISC",
@@ -47,4 +50,10 @@ "bugs": {
   "engines": {
-    "node": ">=10"
+    "node": "^12.13.0 || ^14.15.0 || >=16"
+  },
+  "tap": {
+    "branches": 97
+  },
+  "templateOSS": {
+    "version": "2.7.1"
   }
 }

README.md

@@ -61,2 +61,3 @@ # npm-package-arg
   * `remote` - An http url (presumably to a tgz)
+  * `alias` - A specifier with an alias, like `myalias@npm:foo@1.2.3`
 * `registry` - If true this specifier refers to a resource hosted on a
@@ -85,1 +86,3 @@ registry.  This is true for `tag`, `version` and `range` types.
   `npa.resolve(name, spec)` then this will be `name + '@' + spec`.
+* `subSpec` - If `type === 'alias'`, this is a Result Object for parsing the
+  target specifier for the alias.

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Major refactor

Supply chain risk

Package has recently undergone a major refactor. It may be unstable or indicate significant internal changes. Use caution when updating to versions that include significant changes.

Found 1 instance in 1 package

New author

Supply chain risk

A new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

17225

increased by3.77%

Lines of code

330

increased by5.77%

Number of lines in readme file

87

increased by3.57%

Worsened metrics

Number of medium supply chain risk alerts

2

increased byInfinity%

Dependency changes

• Updatedhosted-git-info@^4.1.0

• Updatedsemver@^7.3.5