riot - npm Package Compare versions

Comparing version 0.0.0 to 2.0.0-beta1

package.json

 {
   "name": "riot",
-  "version": "0.0.0",
-  "description": "Riot!",
-  "main": "main.js",
-  "scripts": {
-    "test": "echo \"Error: no test specified\" && exit 1"
+  "version": "2.0.0-beta1",
+  "description": "A React- like, 2.5K user interface library",
+  "homepage": "https://muut.com/riotjs/",
+  "repository": "muut/riotjs",
+  "author": "Muut, Inc. and other contributors",
+  "license": "MIT",
+  "keywords": [
+    "MVP",
+    "MVC",
+    "framework",
+    "library",
+    "riotjs",
+    "riot.js"
+  ],
+  "preferGlobal": true,
+  "bin": {
+    "riot": "compiler/make.js"
   },
-  "author": "[e-mail]",
-  "license": "MIT"
+  "main": "compiler/make.js",
+  "dependencies": {
+    "gaze": "^0.6.4",
+    "minimist": "^1.1.0",
+    "shelljs": "^0.3.0"
+  },
+  "devDependencies": {
+    "jshint": "latest",
+    "uglify-js": "latest",
+    "jsdom": "latest"
+  }
 }

README.md

@@ -1,1 +0,34 @@
-It's a riot!
+
+## Riot.js: A React- like, 2.5K user interface library
+
+### Virtual DOM • Custom tags • IE8 • Full stack
+
+
+#### Tag definition
+
+``` html
+<timer>
+  <p>Seconds Elapsed: { opts.time }</p>
+
+  var timer = setInterval(function() {
+    if (!self.update({ time: ++opts.time })) clearInterval(timer)
+
+  }, 1000)
+</timer>
+```
+
+#### Mounting
+
+``` javascript
+riot.mount('time', { time: 0 })
+```
+
+#### Nested tags
+
+``` html
+<timetable>
+  <timer time="0"></timer>
+  <timer time="10"></timer>
+  <timer time="20"></timer>
+<timetable>
+```

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Major refactor

Supply chain risk

Package has recently undergone a major refactor. It may be unstable or indicate significant internal changes. Use caution when updating to versions that include significant changes.

Found 1 instance in 1 package

New author

Supply chain risk

A new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.

Found 1 instance in 1 package

Shell access

Supply chain risk

This module accesses the system shell. Accessing the system shell increases the risk of executing arbitrary code.

Found 1 instance in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

Unidentified License

License

(Experimental) Something that seems like a license was found, but its contents could not be matched with a known license.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

No repository

Supply chain risk

Package does not have a linked source code repository. Without this field, a package will have no reference to the location of the source code use to generate the package.

Found 1 instance in 1 package

No tests

Quality

Package does not have any tests. This is a strong signal of a poorly maintained or low quality package.

Found 1 instance in 1 package

No website

Quality

Package does not have a website.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

154867

increased by27604.29%

Number of package files

51

increased by1600%

Lines of code

2359

increased by11695%

Number of low quality alerts

2

decreased by-33.33%

Number of lines in readme file

35

increased by1650%

Worsened metrics

Dependency count

3

increased byInfinity%

Dev dependency count

3

increased byInfinity%

Number of low license alerts

1

increased byInfinity%

License quality

80

decreased by-20%

Number of low supply chain risk alerts

2

increased by100%

Number of medium supply chain risk alerts

3

increased byInfinity%

Dependency changes

• + Addedgaze@^0.6.4

• + Addedminimist@^1.1.0

• + Addedshelljs@^0.3.0

• + Addedabsolute-path@0.0.0(transitive)

• + Addedbindings@1.2.1(transitive)

• + Addedgaze@0.6.4(transitive)

• + Addedglob@3.2.11(transitive)

• + Addedglobule@0.2.0(transitive)

• + Addedgraceful-fs@2.0.3(transitive)

• + Addedinherits@2.0.4(transitive)

• + Addedlodash@2.4.2(transitive)

• + Addedlru-cache@2.7.3(transitive)

• + Addedminimatch@0.2.140.3.0(transitive)

• + Addedminimist@1.2.8(transitive)

• + Addednan@0.8.0(transitive)

• + Addednextback@0.1.0(transitive)

• + Addedshelljs@0.3.0(transitive)

• + Addedsigmund@1.0.1(transitive)