react-checkbox-tree - npm Package Compare versions

Comparing version 0.6.0 to 0.6.1

CHANGELOG.md

 # CHANGELOG
 
+## [v0.6.1](https://github.com/jakezatecky/react-checkbox-tree/compare/v0.6.0...v0.6.1) (2017-05-09)
+
+### Other
+
+* [#33]: Add a `prepublish` command to ensure that the `./lib` folder is built before package is published to npm
+
 ## [v0.6.0](https://github.com/jakezatecky/react-checkbox-tree/compare/v0.5.2...v0.6.0) (2017-05-06)
@@ -4,0 +10,0 @@

package.json

 {
   "name": "react-checkbox-tree",
-  "version": "0.6.0",
+  "version": "0.6.1",
   "description": "A simple and elegant checkbox tree for React.",
@@ -23,2 +23,3 @@ "author": "Jake Zatecky",
     "gh-deploy": "git subtree push --prefix examples/dist origin gh-pages",
+    "prepublish": "in-publish && gulp build",
     "test": "gulp test"
@@ -32,3 +33,3 @@ },
     "babel-eslint": "^7.0.0",
-    "babel-loader": "^6.2.4",
+    "babel-loader": "^7.0.0",
     "babel-preset-es2015": "^6.13.2",
@@ -53,2 +54,3 @@ "babel-preset-react": "^6.11.1",
     "gulp-scss-lint": "^0.4.0",
+    "in-publish": "^2.0.0",
     "jsdom": "^9.11.0",
@@ -55,0 +57,0 @@ "mocha": "^3.0.2",

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Major refactor

Supply chain risk

Package has recently undergone a major refactor. It may be unstable or indicate significant internal changes. Use caution when updating to versions that include significant changes.

Found 1 instance in 1 package

Uses eval

Supply chain risk

Package uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Found 2 instances in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 2 instances in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

699963

increased by473.9%

Lines of code

18533

increased by1193.3%

Worsened metrics

Dev dependency count

31

increased by3.33%

Number of low supply chain risk alerts

10

increased byInfinity%

Number of medium supply chain risk alerts

5

increased byInfinity%

No dependency changes