purgecss - npm Package Compare versions

Comparing version 0.16.0 to 0.18.0

CHANGELOG.md

 # Changelog
 
+# v0.18.0 - 2018-01-05
+
+* Change default extractor regex, fixing https://github.com/FullHuman/purgecss/issues/37
+* Update dependencies
+* Use files property in package.json: importing only necessary files.
+
 # v0.16.0 - 2017-12-18
@@ -4,0 +10,0 @@

package.json

 {
   "name": "purgecss",
-  "version": "0.16.0",
+  "version": "0.18.0",
   "description": "Remove unused css selectors.",
@@ -14,2 +14,3 @@ "main": "./lib/purgecss.js",
   },
+  "files": ["lib/", "flow-typed/", "bin/"],
   "bin": "./bin/purgecss",
@@ -38,8 +39,8 @@ "scripts": {
     "glob": "^7.1.2",
-    "postcss": "^6.0.14",
+    "postcss": "^6.0.15",
     "postcss-selector-parser": "^3.1.1",
-    "yargs": "^10.0.3"
+    "yargs": "^10.1.0"
   },
   "devDependencies": {
-    "babel-eslint": "^8.0.3",
+    "babel-eslint": "^8.1.2",
     "babel-plugin-external-helpers": "^6.22.0",
@@ -50,16 +51,10 @@ "babel-plugin-transform-class-properties": "^6.24.1",
     "codacy-coverage": "^2.0.3",
-    "eslint": "^4.13.0",
-    "eslint-config-standard": "^10.2.1",
+    "eslint": "^4.14.0",
     "eslint-plugin-flowtype": "^2.40.1",
-    "eslint-plugin-html": "^4.0.1",
-    "eslint-plugin-import": "^2.8.0",
-    "eslint-plugin-node": "^5.2.1",
-    "eslint-plugin-promise": "^3.6.0",
-    "eslint-plugin-standard": "^3.0.1",
     "flow-bin": "^0.61.0",
-    "jest": "^22.0.1",
-    "prettier": "^1.9.1",
+    "jest": "^22.0.4",
+    "prettier": "^1.9.2",
     "regenerator-runtime": "^0.11.1",
-    "rollup": "^0.52.1",
-    "rollup-plugin-babel": "^3.0.2",
+    "rollup": "^0.52.3",
+    "rollup-plugin-babel": "^3.0.3",
     "rollup-plugin-commonjs": "^8.2.6",
@@ -71,3 +66,3 @@ "rollup-plugin-flow": "^1.1.1",
     "rollup-watch": "^4.3.1",
-    "uglify-es": "^3.2.2"
+    "uglify-es": "^3.3.4"
   },
@@ -74,0 +69,0 @@ "engines": {

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Major refactor

Supply chain risk

Package has recently undergone a major refactor. It may be unstable or indicate significant internal changes. Use caution when updating to versions that include significant changes.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Shell access

Supply chain risk

This module accesses the system shell. Accessing the system shell increases the risk of executing arbitrary code.

Found 1 instance in 1 package

Dynamic require

Supply chain risk

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 4 instances in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

Improved metrics

Dev dependency count

21

decreased by-22.22%

Number of low supply chain risk alerts

8

decreased by-63.64%

Worsened metrics

Total package byte prevSize

198513

decreased by-78.17%

Number of package files

9

decreased by-93.18%

Lines of code

797

decreased by-96.64%

Dependency changes

• Updatedpostcss@^6.0.15

• Updatedyargs@^10.1.0