rollup - npm Package Compare versions

Comparing version 0.2.0 to 0.2.1

CHANGELOG.md

 # rollup changelog
 
+## 0.2.1
+
+* Include dist files in npm package (duh)
+
 ## 0.2.0
@@ -4,0 +8,0 @@

package.json

 {
   "name": "rollup",
-  "version": "0.2.0",
+  "version": "0.2.1",
   "description": "Next-generation ES6 module bundler",
@@ -41,3 +41,8 @@ "main": "dist/rollup.js",
     "sander": "^0.3.3"
-  }
+  },
+  "files": [
+    "src",
+    "dist",
+    "README.md"
+  ]
 }

Fixed alerts

Major refactor

Supply chain risk

Package has recently undergone a major refactor. It may be unstable or indicate significant internal changes. Use caution when updating to versions that include significant changes.

Found 1 instance in 1 package

Uses eval

Supply chain risk

Package uses eval() which is a dangerous function. This prevents the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Found 1 instance in 1 package

Dynamic require

Supply chain risk

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

90005

increased by148.64%

Lines of code

1362

increased by46.77%

Number of low supply chain risk alerts

0

decreased by-100%

Number of medium supply chain risk alerts

0

decreased by-100%

Worsened metrics

Number of package files

20

decreased by-80.58%

No dependency changes