text-to-svg - npm Package Compare versions

Comparing version 3.1.3 to 3.1.4

CHANGELOG.md

 # CHANGELOG
 
+## 3.1.4
+
+ - Tested on Node.js v10.15.2
+ - Update dependencies.
+   - `opentype.js`: `0.7.3` -> `0.11.0`
+
 ## 3.1.3
@@ -4,0 +10,0 @@

package.json

 {
   "name": "text-to-svg",
-  "version": "3.1.3",
+  "version": "3.1.4",
   "description": "Convert text to SVG path without native dependence.",
@@ -50,8 +50,9 @@ "main": "index.js",
     "commander": "^2.11.0",
-    "opentype.js": "0.7.3"
+    "opentype.js": "0.11.0"
   },
   "devDependencies": {
-    "babel-core": "^6.7.2",
-    "babel-preset-es2015": "^6.6.0",
-    "browserify": "^14.3.0",
+    "@babel/core": "^7.3.4",
+    "@babel/preset-env": "^7.3.4",
+    "@babel/register": "^7.0.0",
+    "browserify": "^16.2.3",
     "del": "^3.0.0",
@@ -61,13 +62,13 @@ "eslint-plugin-arrow-function": "^2.0.0",
     "eslint-plugin-template-string": "^1.0.0",
-    "gulp": "^3.9.0",
-    "gulp-babel": "^6.1.1",
-    "gulp-eslint": "^3.0.1",
-    "gulp-mocha": "^4.3.1",
-    "vinyl-source-stream": "^1.1.0"
+    "gulp": "^4.0.0",
+    "gulp-babel": "^8.0.0",
+    "gulp-eslint": "^5.0.0",
+    "gulp-mocha": "^6.0.0",
+    "vinyl-source-stream": "^2.0.0"
   },
   "babel": {
     "presets": [
-      "es2015"
+      "@babel/preset-env"
     ]
   }
 }

README.md

 # text-to-svg
 
-[![NPM version][npm-image]][npm-url] [![Build Status][travis-image]][travis-url] [![Dependency Status][dependency-image]][dependency-url] [![Gitter][gitter-image]][gitter-url]
+[![NPM version][npm-image]][npm-url] [![Build Status][travis-image]][travis-url]
 
@@ -180,5 +180,3 @@ Convert text to SVG path without native dependence.
 [travis-image]: https://travis-ci.org/shrhdk/text-to-svg.svg?branch=master
-[dependency-url]: https://gemnasium.com/shrhdk/text-to-svg
-[dependency-image]: https://gemnasium.com/shrhdk/text-to-svg.svg
 [gitter-url]: https://gitter.im/shrhdk/text-to-svg
 [gitter-image]: https://badges.gitter.im/Join%20Chat.svg

New alerts

Major refactor

Supply chain risk

Package has recently undergone a major refactor. It may be unstable or indicate significant internal changes. Use caution when updating to versions that include significant changes.

Found 1 instance in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

Fixed alerts

Dynamic require

Supply chain risk

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 1 instance in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

Improved metrics

Number of low supply chain risk alerts

59

decreased by-52.42%

Worsened metrics

Total package byte prevSize

6386692

decreased by-51.85%

Dev dependency count

13

increased by8.33%

Number of package files

14

decreased by-30%

Lines of code

771

decreased by-94.7%

Number of lines in readme file

182

decreased by-1.09%

Number of medium supply chain risk alerts

1

increased byInfinity%

Dependency changes

• + Addedopentype.js@0.11.0(transitive)

• + Addedstring.prototype.codepointat@0.2.1(transitive)

• - Removedopentype.js@0.7.3(transitive)

• Updatedopentype.js@0.11.0