purgecss - npm Package Compare versions

Comparing version 0.18.1 to 0.19.0

CHANGELOG.md

 # Changelog
 
+# v.0.19.0 - 2018-01-14
+
+* https://github.com/FullHuman/purgecss/pull/34, fix https://github.com/FullHuman/purgecss/issues/33
+* Update dependencies
+* Modify Rollup configuration: remove commonjs plugin and add glob as external dependency
+
 # v0.18.0 - 2018-01-05
@@ -4,0 +10,0 @@

package.json

 {
   "name": "purgecss",
-  "version": "0.18.1",
+  "version": "0.19.0",
   "description": "Remove unused css selectors.",
@@ -12,3 +12,4 @@ "main": "./lib/purgecss.js",
     "test": "__tests__",
-    "example": "examples"
+    "example": "examples",
+    "doc": "docs"
   },
@@ -50,8 +51,8 @@ "files": [
     "glob": "^7.1.2",
-    "postcss": "^6.0.15",
+    "postcss": "^6.0.16",
     "postcss-selector-parser": "^3.1.1",
-    "yargs": "^10.1.0"
+    "yargs": "^10.1.1"
   },
   "devDependencies": {
-    "babel-eslint": "^8.1.2",
+    "babel-eslint": "^8.2.1",
     "babel-plugin-external-helpers": "^6.22.0",
@@ -65,14 +66,13 @@ "babel-plugin-transform-class-properties": "^6.24.1",
     "flow-bin": "^0.63.1",
-    "jest": "^22.0.4",
-    "prettier": "^1.9.2",
+    "jest": "^22.0.6",
+    "prettier": "^1.10.2",
     "regenerator-runtime": "^0.11.1",
-    "rollup": "^0.53.3",
+    "rollup": "^0.54.0",
     "rollup-plugin-babel": "^3.0.3",
-    "rollup-plugin-commonjs": "^8.2.6",
     "rollup-plugin-flow": "^1.1.1",
     "rollup-plugin-node-builtins": "^2.1.2",
-    "rollup-plugin-node-resolve": "^3.0.0",
+    "rollup-plugin-node-resolve": "^3.0.2",
     "rollup-plugin-uglify": "^2.0.1",
     "rollup-watch": "^4.3.1",
-    "uglify-es": "^3.3.4"
+    "uglify-es": "^3.3.7"
   },
@@ -79,0 +79,0 @@ "engines": {

New alerts

Major refactor

Supply chain risk

Package has recently undergone a major refactor. It may be unstable or indicate significant internal changes. Use caution when updating to versions that include significant changes.

Found 1 instance in 1 package

Dynamic require

Supply chain risk

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

Found 1 instance in 1 package

Fixed alerts

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 1 instance in 1 package

Improved metrics

Dev dependency count

20

decreased by-4.76%

Number of low supply chain risk alerts

4

decreased by-50%

Worsened metrics

Total package byte prevSize

34373

decreased by-82.69%

Lines of code

169

decreased by-78.8%

Number of medium supply chain risk alerts

1

increased byInfinity%

Dependency changes

• Updatedpostcss@^6.0.16

• Updatedyargs@^10.1.1