sql-parser - npm Package Compare versions

Comparing version 0.3.0 to 0.4.0

index.js

@@ -1,2 +0,1 @@
-require('coffee-script')
 sql = require('./lib/sql_parser')
@@ -3,0 +2,0 @@

package.json

 {
   "name": "sql-parser",
   "description": "Lexer and Parser for SQL Syntax",
-  "version": "0.3.0",
+  "version": "0.4.0",
   "author": {
@@ -13,6 +13,6 @@ "name": "Andy Kent",
   "dependencies": {
-    "coffee-script": "1.1.3",
-    "jison": "https://github.com/pvwoods/jison/tarball/master"
   },
   "devDependencies": {
+    "jison": "https://github.com/pvwoods/jison/tarball/master",
+    "coffee-script": "1.2.0",
     "mocha"     : "0.3.2",
@@ -19,0 +19,0 @@ "should"    : "0.3.2"

README.md

@@ -39,2 +39,7 @@ SQL Parser
     
-    
+
+
+Credits
+-------
+
+A lot of the boilerplate and compilation code in this project is borrowed from the CoffeeScript project as it was the best example of a project using JISON that I could find. Thanks.

New alerts

Major refactor

Supply chain risk

Package has recently undergone a major refactor. It may be unstable or indicate significant internal changes. Use caution when updating to versions that include significant changes.

Found 1 instance in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

Fixed alerts

HTTP dependency

Supply chain risk

Contains a dependency which resolves to a remote HTTP URL which could be used to inject untrusted code and reduce overall package reliability.

Found 1 instance in 1 package

Trivial Package

Supply chain risk

Packages less than 10 lines of code are easily copied into your own project and may not warrant the additional supply chain risk of an external dependency.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

159886

increased by523.6%

Dependency count

0

decreased by-100%

Number of package files

22

increased by69.23%

Lines of code

2898

increased by57860%

Number of lines in readme file

44

increased by12.82%

Number of high supply chain risk alerts

0

decreased by-100%

Worsened metrics

Dev dependency count

4

increased by100%

Number of low supply chain risk alerts

3

increased byInfinity%

Dependency changes

• - Removedcoffee-script@1.1.3

• - Removedjison@https://github.com/pvwoods/jison/tarball/master

• - Removedcoffee-script@1.1.3(transitive)