openpipe - npm Package Compare versions

Comparing version 0.3.5 to 0.3.6

package.json

 {
   "name": "openpipe",
-  "version": "0.3.5",
+  "version": "0.3.6",
   "type": "module",
   "description": "Metrics and auto-evaluation for LLM calls",
-  "main": "./index.js",
+  "main": "./dist/index.cjs.js",
   "publishConfig": {
+    "name": "openpipe",
     "access": "public"
@@ -22,2 +23,4 @@ },
   "devDependencies": {
+    "@rollup/plugin-json": "^6.0.0",
+    "@rollup/plugin-node-resolve": "^15.2.1",
     "@types/lodash-es": "^4.17.8",
@@ -27,2 +30,5 @@ "@types/node": "^20.4.8",
     "dotenv": "^16.3.1",
+    "rollup": "^3.28.1",
+    "rollup-plugin-typescript2": "^0.35.0",
+    "tslib": "^2.6.2",
     "tsx": "^3.12.7",
@@ -35,3 +41,14 @@ "typescript": "^5.0.4",
     "test": "vitest"
+  },
+  "module": "./dist/index.esm.js",
+  "exports": {
+    ".": {
+      "import": "./dist/index.esm.js",
+      "require": "./dist/index.cjs.js"
+    },
+    "./openai": {
+      "import": "./dist/openai.esm.js",
+      "require": "./dist/openai.cjs.js"
+    }
   }
 }

New alerts

Major refactor

Supply chain risk

Package has recently undergone a major refactor. It may be unstable or indicate significant internal changes. Use caution when updating to versions that include significant changes.

Found 1 instance in 1 package

Fixed alerts

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 2 instances in 1 package

Improved metrics

Total package byte prevSize

431624

increased by72.06%

Lines of code

4475

increased by104.81%

Number of low supply chain risk alerts

1

decreased by-75%

Worsened metrics

Dev dependency count

12

increased by71.43%

Number of package files

66

decreased by-28.26%

Number of medium supply chain risk alerts

7

increased by600%

No dependency changes