rox-node - npm Package Compare versions

Comparing version 5.3.1 to 5.4.0

package.json

 {
   "name": "rox-node",
-  "version": "5.3.1",
+  "version": "5.4.0",
   "description": "Rollout.io ROX JS SDK Node",
@@ -46,7 +46,7 @@ "author": "Rollout.io <[e-mail]>",
   "dependencies": {
-    "axios": "^0.26.0"
+    "axios": "^0.27.2"
   },
   "devDependencies": {
     "@cloudbees/eslint-plugin": "cloudbees/eslint-plugin",
-    "@rollup/plugin-commonjs": "^21.0.1",
+    "@rollup/plugin-commonjs": "^22.0.1",
     "@rollup/plugin-json": "^4.1.0",
@@ -69,3 +69,3 @@ "@rollup/plugin-node-resolve": "^13.1.3",
     "rollup-plugin-node-resolve": "^3.0.0",
-    "rox-crypto": "^5.3.1",
+    "rox-crypto": "^5.4.0",
     "supertest": "^6.1.6",
@@ -91,3 +91,3 @@ "ts-jest": "^27.1.2",
   },
-  "gitHead": "5639cb33c50e0c22f55e499a4572177bdf15c132"
+  "gitHead": "833e472075d3c93610a1468f10de735ce7a345cb"
 }

README.md

 ![Rollout](https://1ko9923xosh2dsbjsxpwqp45-wpengine.netdna-ssl.com/wp-content/themes/rollout/images/rollout_white_logo1.png)
 
-Rollout is a Secure Feature Managment Solution for the Enterprise.
+CloudBees Feature Management is a secure feature management solution for the enterprise.
 
@@ -9,3 +9,3 @@ > Accelerate development and minimize the risk of deploying new code with simple to create feature flags, controlled rollouts, advanced target groups & deployment rules.
 
-Please see the detailed instructions in our docs how to [add Rollout to your project](https://support.rollout.io/docs/installing-the-sdk).
+Please see the detailed instructions in our docs on how to [add CloudBees Feature Management to your project](https://support.rollout.io/docs/installing-the-sdk).
 
@@ -12,0 +12,0 @@ ## Documentation

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 3 instances in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

712092

increased by55.18%

Lines of code

22586

increased by149.98%

Worsened metrics

Number of low supply chain risk alerts

11

increased by175%

Dependency changes

• + Addedasynckit@0.4.0(transitive)

• + Addedaxios@0.27.2(transitive)

• + Addedcombined-stream@1.0.8(transitive)

• + Addeddelayed-stream@1.0.0(transitive)

• + Addedform-data@4.0.1(transitive)

• + Addedmime-db@1.52.0(transitive)

• + Addedmime-types@2.1.35(transitive)

• - Removedaxios@0.26.1(transitive)

• Updatedaxios@^0.27.2