serverless-dotenv-plugin - npm Package Compare versions

Comparing version 3.6.0 to 3.7.0

CHANGELOG.md

@@ -12,2 +12,6 @@ # Changelog
 
+## 3.7.x
+
+* fix: only package required files. ([#134](https://github.com/neverendingqs/serverless-dotenv-plugin/pull/134))
+
 ## 3.6.x
@@ -14,0 +18,0 @@

package.json

 {
   "name": "serverless-dotenv-plugin",
-  "version": "3.6.0",
+  "version": "3.7.0",
   "description": "Preload environment variables with dotenv into serverless.",
-  "main": "index.js",
+  "main": "src/index.js",
+  "files": [
+    "src/**/*"
+  ],
   "scripts": {
@@ -7,0 +10,0 @@ "prettier": "prettier --ignore-path .gitignore --write \"**/*.js\"",

New alerts

Major refactor

Supply chain risk

Package has recently undergone a major refactor. It may be unstable or indicate significant internal changes. Use caution when updating to versions that include significant changes.

Found 1 instance in 1 package

Fixed alerts

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 2 instances in 1 package

Mixed license

License

(Experimental) Package contains multiple licenses.

Found 1 instance in 1 package

Improved metrics

Number of low license alerts

0

decreased by-100%

Number of low supply chain risk alerts

4

decreased by-33.33%

Worsened metrics

Total package byte prevSize

21311

decreased by-66.82%

Number of package files

5

decreased by-80.77%

Lines of code

193

decreased by-83.55%

Number of medium supply chain risk alerts

1

increased byInfinity%

No dependency changes