snyk-resolve - npm Package Compare versions

Comparing version 1.0.1 to 1.1.0

lib/index.js

 module.exports = resolvePkg;
 module.exports.sync = sync;
 
-var fs = require('then-fs');
+var fs = require('promise-fs');
 var path = require('path');
@@ -6,0 +6,0 @@ var debug = require('debug')('snyk:resolve');

package.json

@@ -10,4 +10,3 @@ {
     "lint": "jscs lib/*.js -v",
-    "test": "npm run lint && tap test/*.test.js --cov --timeout=60",
-    "semantic-release": "semantic-release pre && npm publish && semantic-release post"
+    "test": "npm run lint && tap test/*.test.js --cov --timeout=60"
   },
@@ -20,18 +19,17 @@ "keywords": [
   "dependencies": {
-    "debug": "^3.1.0",
-    "then-fs": "^2.0.0"
+    "debug": "^4.1.1",
+    "promise-fs": "^2.1.1"
   },
   "devDependencies": {
-    "es6-promise": "^3.0.2",
-    "jscs": "^2.8.0",
-    "proxyquire": "^1.7.3",
-    "tap": "^5.1.1",
-    "tape": "^4.4.0",
-    "semantic-release": "^4.3.5"
+    "es6-promise": "^4.2.8",
+    "jscs": "^3.0.7",
+    "proxyquire": "^2.1.3",
+    "tap": "^12.7.0",
+    "tape": "^4.11.0"
   },
   "repository": {
     "type": "git",
-    "url": "https://github.com/Snyk/resolve-package.git"
+    "url": "https://github.com/snyk/resolve-package.git"
   },
-  "version": "1.0.1"
-}
+  "version": "1.1.0"
+}

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

New author

Supply chain risk

A new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.

Found 1 instance in 1 package

Improved metrics

Dev dependency count

5

decreased by-16.67%

Number of package files

21

increased by10.53%

Number of medium supply chain risk alerts

0

decreased by-100%

Worsened metrics

Total package byte prevSize

62252

decreased by-3.43%

Dependency changes

• + Addedpromise-fs@^2.1.1

• + Added@octetstream/promisify@2.0.2(transitive)

• + Addeddebug@4.3.7(transitive)

• + Addedpromise-fs@2.1.1(transitive)

• - Removedthen-fs@^2.0.0

• - Removedasap@2.0.6(transitive)

• - Removeddebug@3.2.7(transitive)

• - Removedpromise@7.3.1(transitive)

• - Removedthen-fs@2.0.0(transitive)

• Updateddebug@^4.1.1