prettier - npm Package Compare versions

Comparing version 1.3.1 to 1.4.0-beta

package.json

 {
   "name": "prettier",
-  "version": "1.3.1",
+  "version": "1.4.0-beta",
   "description": "Prettier is an opinionated JavaScript formatter",
@@ -12,19 +12,27 @@ "bin": {
   "main": "./index.js",
-  "dependencies": {
-    "ast-types": "0.9.8",
+  "dependencies": {},
+  "devDependencies": {
     "babel-code-frame": "6.22.0",
-    "babylon": "7.0.0-beta.8",
+    "babylon": "7.0.0-beta.10",
     "chalk": "1.1.3",
+    "cross-spawn": "5.1.0",
+    "diff": "3.2.0",
+    "eslint": "3.19.0",
+    "eslint-plugin-prettier": "2.1.1",
     "esutils": "2.0.2",
-    "flow-parser": "0.45.0",
+    "flow-parser": "0.47.0",
     "get-stdin": "5.0.1",
-    "glob": "7.1.1",
-    "jest-validate": "19.0.0",
-    "minimist": "1.2.0"
-  },
-  "devDependencies": {
-    "diff": "3.2.0",
-    "jest": "19.0.1",
+    "glob": "7.1.2",
+    "jest": "20.0.0",
+    "jest-validate": "20.0.3",
+    "minimist": "1.2.0",
     "mkdirp": "^0.5.1",
-    "rimraf": "^2.6.1",
+    "postcss": "^6.0.1",
+    "postcss-less": "^1.0.0",
+    "postcss-media-query-parser": "0.2.3",
+    "postcss-scss": "1.0.0",
+    "postcss-selector-parser": "2.2.3",
+    "postcss-values-parser": "git://github.com/shellscape/postcss-values-parser.git#5e351360479116f3fe309602cdd15b0a233bc29f",
+    "prettier": "1.3.1",
+    "rimraf": "2.6.1",
     "rollup": "0.41.1",
@@ -36,10 +44,13 @@ "rollup-plugin-commonjs": "7.0.0",
     "rollup-plugin-node-resolve": "2.0.0",
+    "rollup-plugin-replace": "1.1.1",
     "typescript": "2.3.2",
-    "typescript-eslint-parser": "git://github.com/eslint/typescript-eslint-parser.git#a294afa8158c9c088521eed72b6745eed302361c"
+    "typescript-eslint-parser": "git://github.com/eslint/typescript-eslint-parser.git#3dcba7d53f61f51069ed84b57e053802c014d703",
+    "uglify-es": "mishoo/UglifyJS2#harmony",
+    "webpack": "2.6.1"
   },
   "scripts": {
     "test": "jest",
-    "format": "./bin/prettier.js --write",
-    "format:single": "npm run format -- src/printer.js",
-    "format:all": "npm run format -- index.js src/*.js bin/*.js",
+    "test-integration": "jest tests_integration",
+    "lint": "eslint .",
+    "build": "./scripts/build/build.sh",
     "build:docs": "rollup -c docs/rollup.config.js"
@@ -54,3 +65,3 @@ },
     ],
-    "testRegex": "jsfmt\\.spec\\.js$",
+    "testRegex": "jsfmt\\.spec\\.js$|__tests__/.*\\.js$",
     "testPathIgnorePatterns": [
@@ -57,0 +68,0 @@ "tests/new_react",

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Major refactor

Supply chain risk

Package has recently undergone a major refactor. It may be unstable or indicate significant internal changes. Use caution when updating to versions that include significant changes.

Found 1 instance in 1 package

No README

Quality

Package does not have a README. This may indicate a failed publish or a low quality package.

Found 1 instance in 1 package

Uses eval

Supply chain risk

Package uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 3 instances in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

No v1

Quality

Package is not semver >=1. This means it is not stable and does not support ^ ranges.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Dynamic require

Supply chain risk

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

Found 1 instance in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

4102621

increased by108.62%

Dependency count

0

decreased by-100%

Lines of code

46812

increased by27.3%

Worsened metrics

Dev dependency count

34

increased by183.33%

Number of package files

7

decreased by-78.79%

Number of low quality alerts

2

increased by100%

Number of medium quality alerts

1

increased byInfinity%

Number of lines in readme file

0

decreased by-100%

Number of low supply chain risk alerts

14

increased by250%

Number of medium supply chain risk alerts

6

increased byInfinity%

Dependency changes

• - Removedast-types@0.9.8

• - Removedbabel-code-frame@6.22.0

• - Removedbabylon@7.0.0-beta.8

• - Removedchalk@1.1.3

• - Removedesutils@2.0.2

• - Removedflow-parser@0.45.0

• - Removedget-stdin@5.0.1

• - Removedglob@7.1.1

• - Removedjest-validate@19.0.0

• - Removedminimist@1.2.0

• - Removedansi-regex@2.1.1(transitive)

• - Removedansi-styles@2.2.13.2.1(transitive)

• - Removedast-types@0.9.8(transitive)

• - Removedbabel-code-frame@6.22.0(transitive)

• - Removedbabylon@7.0.0-beta.8(transitive)

• - Removedbalanced-match@1.0.2(transitive)

• - Removedbrace-expansion@1.1.11(transitive)

• - Removedchalk@1.1.3(transitive)

• - Removedcolor-convert@1.9.3(transitive)

• - Removedcolor-name@1.1.3(transitive)

• - Removedconcat-map@0.0.1(transitive)

• - Removedescape-string-regexp@1.0.5(transitive)

• - Removedesutils@2.0.2(transitive)

• - Removedflow-parser@0.45.0(transitive)

• - Removedfs.realpath@1.0.0(transitive)

• - Removedget-stdin@5.0.1(transitive)

• - Removedglob@7.1.1(transitive)

• - Removedhas-ansi@2.0.0(transitive)

• - Removedinflight@1.0.6(transitive)

• - Removedinherits@2.0.4(transitive)

• - Removedjest-matcher-utils@19.0.0(transitive)

• - Removedjest-validate@19.0.0(transitive)

• - Removedjs-tokens@3.0.2(transitive)

• - Removedleven@2.1.0(transitive)

• - Removedminimatch@3.1.2(transitive)

• - Removedminimist@1.2.0(transitive)

• - Removedonce@1.4.0(transitive)

• - Removedpath-is-absolute@1.0.1(transitive)

• - Removedpretty-format@19.0.0(transitive)

• - Removedstrip-ansi@3.0.1(transitive)

• - Removedsupports-color@2.0.0(transitive)

• - Removedwrappy@1.0.2(transitive)