planet-css - npm Package Compare versions

Comparing version 0.9.0 to 0.9.1-das

package.json

 {
   "name": "planet-css",
-  "version": "0.9.0",
+  "version": "0.9.1-das",
   "description": "Stylesheet reset and Planet style overrides",
@@ -15,2 +15,4 @@ "repository": "https://github.com/planetlabs/planet-css",
     "gulp": "^3.9.0",
+    "gulp-clean": "^0.3.2",
+    "gulp-google-webfonts": "0.0.14",
     "gulp-insert": "^0.5.0",
@@ -21,4 +23,5 @@ "gulp-less": "^3.0.3",
     "less-plugin-clean-css": "^1.5.1",
-    "normalize-css": "^2.3.1"
+    "normalize-css": "^2.3.1",
+    "run-sequence": "^1.2.2"
   }
 }

README.md

@@ -1,2 +0,15 @@
-# planet-css
-Stylesheet reset and Planet style overrides
+# planet-css@das
+Stylesheet reset and Planet style overrides: **DAS Edition**
+
+## Planet Styles for DAS Explorer (Disconnected Explorer)
+---
+Due to restrictions on using CDNs and other connections to 3rd party resources, [Google Fonts](https://fonts.google.com) files requested by the normal `planet-css` package (using @import) are included as part of the build in this version.
+
+We use [gulp-google-webfonts](https://github.com/battlesnake/gulp-google-webfonts) to download font files from Google and generate a font stylesheet with @font-face declarations.
+
+### Usage
+1. Google Fonts are specified in `fonts.list` using the same format as they appear in Google Fonts request strings.
+    - Ex) `Source+Sans+Pro:300,400,600,700|Inconsolata:400,700`
+2. Fonts are downloaded and generated via the Gulp task `fonts-google`
+3. To add and use in your project, install the package with npm: `npm install --save planet-css@das`
+

New alerts

New author

Supply chain risk

A new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.

Found 1 instance in 1 package

Trivial Package

Supply chain risk

Packages less than 10 lines of code are easily copied into your own project and may not warrant the additional supply chain risk of an external dependency.

Found 1 instance in 1 package

Fixed alerts

Deprecated

Maintenance

The maintainer of the package marked it as deprecated. This could indicate that a single version should not be used, or that the package is no longer maintained and any new vulnerabilities will not be fixed.

Found 1 instance in 1 package

Empty package

Supply chain risk

Package does not contain any code. It may be removed, is name squatting, or the result of a faulty package publish.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

133580

increased by276.23%

Number of package files

14

increased by55.56%

Lines of code

2

increased byInfinity%

Number of medium maintenance alerts

0

decreased by-100%

Number of lines in readme file

16

increased by433.33%

Worsened metrics

Dev dependency count

10

increased by42.86%

Number of medium supply chain risk alerts

2

increased by100%

No dependency changes