rollup - npm Package Compare versions

Comparing version 0.18.0 to 0.18.1

CHANGELOG.md

 # rollup changelog
 
+## 0.18.1
+
+* Include `acorn.parse` in bundle, remove `sander` from dependencies, simplify build
+
 ## 0.18.0
@@ -4,0 +8,0 @@

package.json

 {
   "name": "rollup",
-  "version": "0.18.0",
+  "version": "0.18.1",
   "description": "Next-generation ES6 module bundler",
@@ -42,28 +42,26 @@ "main": "dist/rollup.js",
   "devDependencies": {
-    "babel": "^5.8.21",
+    "acorn": "^2.3.0",
     "babel-core": "^5.5.8",
+    "chalk": "^1.0.0",
     "codecov.io": "^0.1.6",
     "console-group": "^0.1.2",
+    "es6-promise": "^3.0.2",
     "eslint": "^1.1.0",
+    "estree-walker": "^0.1.3",
     "gobble": "^0.10.1",
     "gobble-babel": "^5.5.8",
-    "gobble-browserify": "^0.6.1",
     "gobble-cli": "^0.4.2",
-    "gobble-esperanto-bundle": "^0.2.0",
-    "gobble-rollup": "^0.8.0",
-    "gobble-rollup-babel": "^0.1.0",
+    "gobble-rollup": "^0.10.0",
+    "gobble-rollup-babel": "^0.4.0",
     "istanbul": "^0.3.20",
+    "magic-string": "^0.7.0",
     "mocha": "^2.2.4",
     "remap-istanbul": "^0.2.0",
-    "source-map": "^0.4.4"
-  },
-  "dependencies": {
-    "acorn": "^2.3.0",
-    "chalk": "^1.0.0",
-    "estree-walker": "^0.1.3",
-    "magic-string": "^0.7.0",
-    "minimist": "^1.1.1",
     "sander": "^0.3.3",
+    "source-map": "^0.4.4",
     "source-map-support": "^0.3.1"
   },
+  "dependencies": {
+    "minimist": "^1.1.1"
+  },
   "files": [
@@ -70,0 +68,0 @@ "src",

src/Bundle.js

@@ -1,2 +0,2 @@
-import { Promise } from 'sander';
+import Promise from 'es6-promise/lib/es6-promise/promise';
 import MagicString from 'magic-string';
@@ -3,0 +3,0 @@ import { blank, keys } from './utils/object';

src/Module.js

@@ -1,2 +0,2 @@
-import { parse } from 'acorn';
+import { parse } from 'acorn/src/index';
 import MagicString from 'magic-string';
@@ -3,0 +3,0 @@ import { walk } from 'estree-walker';

src/rollup.js

 import { basename } from './utils/path';
-import { writeFile } from 'sander';
+import { writeFile } from './utils/fs';
 import { keys } from './utils/object';
@@ -4,0 +4,0 @@ import SOURCEMAPPING_URL from './utils/sourceMappingURL';

src/utils/load.js

@@ -1,6 +0,6 @@
-import { readFileSync } from 'sander';
+import { readFileSync } from './fs';
 
 export function defaultLoader ( id, options ) {
 	// TODO support plugins e.g. !css and !json?
-	const source = readFileSync( id, { encoding: 'utf-8' });
+	const source = readFileSync( id, 'utf-8' );
 
@@ -7,0 +7,0 @@ return options.transform.reduce( ( source, transformer ) => {

src/utils/resolveId.js

 import { absolutePath, dirname, isAbsolute, resolve } from './path';
-import { readdirSync, readFileSync } from 'sander';
+import { readdirSync, readFileSync } from './fs';
 
@@ -61,3 +61,3 @@ function dirExists ( dir ) {
 			try {
-				pkg = JSON.parse( readFileSync( pkgPath ).toString() );
+				pkg = JSON.parse( readFileSync( pkgPath, 'utf-8' ) );
 			} catch ( err ) {
@@ -64,0 +64,0 @@ throw new Error( `Missing or malformed package.json: ${modulePath}` );

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

High entropy strings

Supply chain risk

Contains high entropy strings. This could be a sign of encrypted data, leaked secrets or obfuscated code.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 1 instance in 1 package

High entropy strings

Supply chain risk

Contains high entropy strings. This could be a sign of encrypted data, leaked secrets or obfuscated code.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

955918

increased by4.93%

Dependency count

1

decreased by-85.71%

Lines of code

12699

increased by16.77%

Number of low supply chain risk alerts

6

decreased by-25%

Worsened metrics

Dev dependency count

20

increased by25%

Dependency changes

• - Removedacorn@^2.3.0

• - Removedchalk@^1.0.0

• - Removedestree-walker@^0.1.3

• - Removedmagic-string@^0.7.0

• - Removedsander@^0.3.3

• - Removedsource-map-support@^0.3.1

• - Removedacorn@2.7.0(transitive)

• - Removedamdefine@1.0.1(transitive)

• - Removedansi-regex@2.1.1(transitive)

• - Removedansi-styles@2.2.1(transitive)

• - Removedbalanced-match@1.0.2(transitive)

• - Removedbrace-expansion@1.1.11(transitive)

• - Removedchalk@1.1.3(transitive)

• - Removedconcat-map@0.0.1(transitive)

• - Removedes6-promise@2.3.0(transitive)

• - Removedescape-string-regexp@1.0.5(transitive)

• - Removedestree-walker@0.1.3(transitive)

• - Removedfs.realpath@1.0.0(transitive)

• - Removedglob@7.2.3(transitive)

• - Removedgraceful-fs@3.0.12(transitive)

• - Removedhas-ansi@2.0.0(transitive)

• - Removedinflight@1.0.6(transitive)

• - Removedinherits@2.0.4(transitive)

• - Removedmagic-string@0.7.0(transitive)

• - Removedminimatch@3.1.2(transitive)

• - Removedmkdirp@0.5.6(transitive)

• - Removednatives@1.1.6(transitive)

• - Removedonce@1.4.0(transitive)

• - Removedpath-is-absolute@1.0.1(transitive)

• - Removedrimraf@2.7.1(transitive)

• - Removedsander@0.3.8(transitive)

• - Removedsource-map@0.1.32(transitive)

• - Removedsource-map-support@0.3.3(transitive)

• - Removedstrip-ansi@3.0.1(transitive)

• - Removedsupports-color@2.0.0(transitive)

• - Removedvlq@0.2.3(transitive)

• - Removedwrappy@1.0.2(transitive)