roc - npm Package Compare versions

Comparing version 1.0.0-alpha to 1.0.0-alpha1

package.json

 {
   "name": "roc",
-  "version": "1.0.0-alpha",
-  "description": "CLI for Roc",
-  "bin": "./lib/roc.js",
+  "version": "1.0.0-alpha1",
+  "description": "CLI for the Roc ecosystem",
+  "main": "./lib/index.js",
+  "bin": "./lib/cli/roc.js",
   "preferGlobal": true,
@@ -18,13 +19,14 @@ "scripts": {
   "dependencies": {
-    "babel-runtime": "~5.8.34",
     "colors": "~1.1.2",
     "commander": "~2.9.0",
+    "fs-extra": "~0.26.2",
+    "inquirer": "~0.11.0",
     "lodash": "~3.10.1",
-    "multi-progress": "~1.0.0",
-    "prettysize": "0.0.3",
-    "rimraf": "~2.4.3",
-    "roc-config": "1.0.0-alpha",
+    "replace": "~0.3.0",
+    "request": "~2.65.0",
+    "roc-config": "1.0.0-alpha1",
     "semver": "~5.0.3",
-    "shelljs": "~0.5.3",
-    "source-map-support": "~0.3.2"
+    "source-map-support": "~0.3.2",
+    "tar": "~2.2.1",
+    "temp": "~0.8.3"
   },
@@ -36,4 +38,12 @@ "devDependencies": {
     "eslint-config-vgno": "~5.0.0",
-    "npm-check-updates": "~2.4.2"
-  }
+    "npm-check-updates": "~2.4.2",
+    "rimraf": "~2.4.3"
+  },
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/vgno/roc.git"
+  },
+  "keywords": [
+    "roc"
+  ]
 }

README.md

 # Roc
 ## Modern Application Development Ecosystem
-_Project status is currently: WIP proof of concept_  
+_Project status is currently WIP proof of concept_  
 
@@ -23,3 +23,2 @@ Provides a complete ecosystem for developing modern applications.
 ```
-Note: packages **not yet made available**. Roc is currently used by another module.
 
@@ -41,7 +40,7 @@ ### Basic web application
 `roc help` will provide available actions.  
-`dev` starts the application locally in development mode with hot code reloading and Browersync.   View your application at http://localhost:3002
+`dev` starts the application locally in development mode with hot code reloading and Browersync. View your application at http://localhost:3002
 
 ## Motivation
 Roc was born out of the need to create modern applications following the correct conventions and using best practices consistently.  
-We quickly realized that keeping boilerplate updated within each project over time was unmanagable. It seems natural to have this _repeated complexity managed by separated semantically versioned packages_.
+We quickly realized that keeping boilerplate updated within each project over time was unmanageable. It seems natural to have this _repeated complexity managed by separated semantically versioned packages_.
 
@@ -58,2 +57,6 @@ ## Read the code
 ## Contribute
-We are still working on getting the balance between flexibility and easy-of-use. Input here is valuable to us. Please get in touch and sync with us before comitting your time to large PRs at this stage of the project.
+We are still working on getting the balance between flexibility and easy-of-use. Input here is valuable to us. Please get in touch and sync with us before committing your time to large PRs at this stage of the project.
+
+## Thanks
+
+Thanks to [Jongleberry](https://github.com/jonathanong) for letting us use the `roc` package name on npm.

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Major refactor

Supply chain risk

Package has recently undergone a major refactor. It may be unstable or indicate significant internal changes. Use caution when updating to versions that include significant changes.

Found 1 instance in 1 package

Shell access

Supply chain risk

This module accesses the system shell. Accessing the system shell increases the risk of executing arbitrary code.

Found 1 instance in 1 package

Debug access

Supply chain risk

Uses debug, reflection and dynamic code execution features.

Found 1 instance in 1 package

Dynamic require

Supply chain risk

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

Found 1 instance in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

No repository

Supply chain risk

Package does not have a linked source code repository. Without this field, a package will have no reference to the location of the source code use to generate the package.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

21876

increased by43.06%

Number of package files

19

increased by11.76%

Lines of code

421

increased by88.79%

Number of lines in readme file

60

increased by5.26%

Worsened metrics

Dependency count

12

increased by9.09%

Dev dependency count

6

increased by20%

Number of low supply chain risk alerts

7

increased by40%

Number of medium supply chain risk alerts

2

increased byInfinity%

Dependency changes

• + Addedfs-extra@~0.26.2

• + Addedinquirer@~0.11.0

• + Addedreplace@~0.3.0

• + Addedrequest@~2.65.0

• + Addedtar@~2.2.1

• + Addedtemp@~0.8.3

• + Addedansi-escapes@1.4.0(transitive)

• + Addedansi-regex@2.1.1(transitive)

• + Addedansi-styles@2.2.1(transitive)

• + Addedasn1@0.1.11(transitive)

• + Addedassert-plus@0.1.5(transitive)

• + Addedasync@2.6.4(transitive)

• + Addedaws-sign2@0.6.0(transitive)

• + Addedbl@1.0.3(transitive)

• + Addedblock-stream@0.0.9(transitive)

• + Addedboom@2.10.1(transitive)

• + Addedcaseless@0.11.0(transitive)

• + Addedchalk@1.1.3(transitive)

• + Addedcli-cursor@1.0.2(transitive)

• + Addedcli-width@1.1.1(transitive)

• + Addedcode-point-at@1.1.0(transitive)

• + Addedcolors@0.5.1(transitive)

• + Addedcombined-stream@1.0.8(transitive)

• + Addedcore-util-is@1.0.3(transitive)

• + Addedcryptiles@2.0.5(transitive)

• + Addedctype@0.5.3(transitive)

• + Addeddeep-extend@0.4.2(transitive)

• + Addeddelayed-stream@1.0.0(transitive)

• + Addedescape-string-regexp@1.0.5(transitive)

• + Addedexit-hook@1.1.1(transitive)

• + Addedextend@3.0.2(transitive)

• + Addedfigures@1.7.0(transitive)

• + Addedforever-agent@0.6.1(transitive)

• + Addedform-data@1.0.1(transitive)

• + Addedfs-extra@0.26.7(transitive)

• + Addedfs.realpath@1.0.0(transitive)

• + Addedfstream@1.0.12(transitive)

• + Addedgenerate-function@2.3.1(transitive)

• + Addedgenerate-object-property@1.2.0(transitive)

• + Addedglob@7.2.3(transitive)

• + Addedgraceful-fs@4.2.11(transitive)

• + Addedhar-validator@2.0.6(transitive)

• + Addedhas-ansi@2.0.0(transitive)

• + Addedhawk@3.1.3(transitive)

• + Addedhoek@2.16.3(transitive)

• + Addedhttp-signature@0.11.0(transitive)

• + Addedinquirer@0.11.4(transitive)

• + Addedis-fullwidth-code-point@1.0.0(transitive)

• + Addedis-my-ip-valid@1.0.1(transitive)

• + Addedis-my-json-valid@2.20.6(transitive)

• + Addedis-property@1.0.2(transitive)

• + Addedisarray@1.0.0(transitive)

• + Addedisstream@0.1.2(transitive)

• + Addedjson-stringify-safe@5.0.1(transitive)

• + Addedjsonfile@2.4.0(transitive)

• + Addedjsonpointer@5.0.1(transitive)

• + Addedklaw@1.3.1(transitive)

• + Addedlodash@4.17.21(transitive)

• + Addedlru-cache@2.7.3(transitive)

• + Addedmime-db@1.52.0(transitive)

• + Addedmime-types@2.1.35(transitive)

• + Addedminimatch@0.2.14(transitive)

• + Addedminimist@1.2.8(transitive)

• + Addedmkdirp@0.5.6(transitive)

• + Addedmute-stream@0.0.5(transitive)

• + Addednode-uuid@1.4.8(transitive)

• + Addednomnom@1.6.2(transitive)

• + Addednumber-is-nan@1.0.1(transitive)

• + Addedoauth-sign@0.8.2(transitive)

• + Addedobject-assign@4.1.1(transitive)

• + Addedonetime@1.1.0(transitive)

• + Addedpinkie@2.0.4(transitive)

• + Addedpinkie-promise@2.0.1(transitive)

• + Addedprocess-nextick-args@1.0.7(transitive)

• + Addedqs@5.2.1(transitive)

• + Addedreadable-stream@2.0.6(transitive)

• + Addedreadline2@1.0.1(transitive)

• + Addedreplace@0.3.0(transitive)

• + Addedrequest@2.65.0(transitive)

• + Addedrestore-cursor@1.0.1(transitive)

• + Addedrimraf@2.6.32.7.1(transitive)

• + Addedroc-config@1.0.0-alpha1(transitive)

• + Addedrun-async@0.1.0(transitive)

• + Addedrx-lite@3.1.2(transitive)

• + Addedsigmund@1.0.1(transitive)

• + Addedsntp@1.0.9(transitive)

• + Addedstring-width@1.0.2(transitive)

• + Addedstring_decoder@0.10.31(transitive)

• + Addedstringstream@0.0.6(transitive)

• + Addedstrip-ansi@3.0.1(transitive)

• + Addedsupports-color@2.0.0(transitive)

• + Addedtar@2.2.2(transitive)

• + Addedtemp@0.8.4(transitive)

• + Addedthrough@2.3.8(transitive)

• + Addedtough-cookie@2.2.2(transitive)

• + Addedtunnel-agent@0.4.3(transitive)

• + Addedunderscore@1.4.4(transitive)

• + Addedutil-deprecate@1.0.2(transitive)

• + Addedxtend@4.0.2(transitive)

• - Removedbabel-runtime@~5.8.34

• - Removedmulti-progress@~1.0.0

• - Removedprettysize@0.0.3

• - Removedrimraf@~2.4.3

• - Removedshelljs@~0.5.3

• - Removedbabel-runtime@5.8.38(transitive)

• - Removedcore-js@1.2.7(transitive)

• - Removedglob@6.0.4(transitive)

• - Removedmulti-progress@1.0.0(transitive)

• - Removedprettysize@0.0.3(transitive)

• - Removedprogress@1.1.8(transitive)

• - Removedrimraf@2.4.5(transitive)

• - Removedshelljs@0.5.3(transitive)

• Updatedroc-config@1.0.0-alpha1