reason - npm Package Compare versions

Comparing version 1.9.0 to 1.10.0

package.json

 
 {
-    "version": "1.9.0",
-    "description": "Reason Meta Language Toolchain",
+    "version": "1.10.0",
+    "description": "Friendly Syntax & Toolchain Powered by OCaml",
     "repository": {
@@ -27,3 +27,3 @@ "type": "git",
         "version": {
-            "val": "1.9.0",
+            "val": "1.10.0",
             "global": true,
@@ -46,3 +46,3 @@ "globalCollisionBehavior": "clobber"
             "globalCollisionBehavior": "clobber",
-            "val": "1.9.0"
+            "val": "1.10.0"
         }
@@ -57,2 +57,5 @@ },
         "@opam-alpha/ocaml": "4.2.3",
+        "@opam-alpha/ocaml-migrate-parsetree": "*",
+        "@opam-alpha/result": "*",
+        "@opam-alpha/topkg": "0.8.1",
         "dependency-env": "*",
@@ -65,3 +68,3 @@ "opam-installer-bin": "https://github.com/yunxing/opam-installer-bin.git",
         "editor": "eval $(dependencyEnv) && eval $EDITOR",
-        "postinstall": "eval $(dependencyEnv) && nopam && ./pkg/substs pkg/META.in && make compile_error && ocaml pkg/build.ml native=true native-dynlink=true utop=${utop_installed:-false} && (opam-installer --prefix=$opam_prefix || true)",
+        "postinstall": "eval $(dependencyEnv) && nopam && ./pkg/substs pkg/META.in && make compile_error && make precompile && ./build.native build --native true --native-dynlink true --utop ${utop_installed:-false} && (opam-installer --prefix=$opam_prefix || true)",
         "clean": "eval $(dependencyEnv) && nopam && make clean",
@@ -68,0 +71,0 @@ "env": "eval $(dependencyEnv) && env",

README.md

@@ -105,3 +105,3 @@
 opam update
-opam switch 4.02.3
+opam switch 4.03.0
 eval $(opam config env)
@@ -113,10 +113,12 @@ git clone [e-mail]:facebook/reason.git
 
+**Note**: during the last `opam pin` step, make sure your local repo is clean. In particular, remove artifacts and `node_modules`. Otherwise the pinning might go stale or stall due to the big `node_modules`.
+
 License
 -------
 
-New content is licensed under the MIT license, works that are forked from other
-projects are under their original licenses.
-[MIT license](LICENSE.txt)
+See Reason license in [LICENSE.txt](LICENSE.txt).
 
+Works that are forked from other projects are under their original licenses.
+
 Editor plugins (which have also been forked) in the `editorSupport/` directory
 include their own licenses.

New alerts

AI-detected potential malware

Supply chain risk

AI has identified this package as malware. This is a strong signal that the package may be malicious.

Found 1 instance in 1 package

Install scripts

Supply chain risk

Install scripts are run when the package is installed. The majority of malware in npm is hidden in install scripts.

Found 1 instance in 1 package

Wildcard dependency

Quality

Package has a dependency with a floating version range. This can cause issues if the dependency publishes a new major version.

Found 2 instances in 1 package

AI-detected potential code anomaly

Supply chain risk

AI has identified unusual behaviors that may pose a security risk.

Found 1 instance in 1 package

Fixed alerts

Install scripts

Supply chain risk

Install scripts are run when the package is installed. The majority of malware in npm is hidden in install scripts.

Found 1 instance in 1 package

New author

Supply chain risk

A new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.

Found 1 instance in 1 package

AI-detected potential code anomaly

Supply chain risk

AI has identified unusual behaviors that may pose a security risk.

Found 1 instance in 1 package

Improved metrics

Number of package files

173

increased by29.1%

Number of lines in readme file

123

increased by1.65%

Number of medium supply chain risk alerts

2

decreased by-33.33%

Worsened metrics

Total package byte prevSize

2584339

decreased by-20.53%

Dependency count

11

increased by22.22%

Number of medium quality alerts

5

increased by66.67%

Number of high supply chain risk alerts

4

increased by33.33%

Dependency changes

• + Added@opam-alpha/ocaml-migrate-parsetree@*

• + Added@opam-alpha/topkg@0.8.1

• + Added@opam-alpha/ocaml-migrate-parsetree@0.5.0(transitive)

• + Added@opam-alpha/topkg@0.8.1(transitive)

• Updated@opam-alpha/result@*