tslib - npm Package Compare versions

Comparing version 0.0.1-security to 1.0.0

package.json

 {
-  "name": "tslib",
-  "version": "0.0.1-security",
-  "description": "",
-  "main": "index.js",
-  "scripts": {
-    "test": "echo \"Error: no test specified\" && exit 1"
-  },
-  "repository": {
-    "type": "git",
-    "url": "git+https://github.com/npm/security-holder.git"
-  },
-  "keywords": [],
-  "author": "",
-  "license": "ISC",
-  "bugs": {
-    "url": "https://github.com/npm/security-holder/issues"
-  },
-  "homepage": "https://github.com/npm/security-holder#readme"
+    "name": "tslib",
+    "author": "Microsoft Corp.",
+    "homepage": "http://typescriptlang.org/",
+    "version": "1.0.0",
+    "licenses": [
+        {
+            "type": "Apache License 2.0",
+            "url": "https://github.com/Microsoft/tslib/blob/master/LICENSE.txt"
+        }
+    ],
+    "description": "Runtime library for TypeScript helper functions",
+    "keywords": [
+        "TypeScript",
+        "Microsoft",
+        "compiler",
+        "language",
+        "javascript",
+        "tslib",
+        "runtime"
+    ],
+    "bugs": {
+        "url": "https://github.com/Microsoft/TypeScript/issues"
+    },
+    "repository": {
+        "type": "git",
+        "url": "https://github.com/Microsoft/tslib.git"
+    },
+    "main": "tslib.js",
+    "typings": "tslib.d.ts"
 }

README.md

@@ -1,9 +0,59 @@
-# Security holding package
+[![Issue Stats](http://issuestats.com/github/Microsoft/TypeScript-Runtime/badge/pr)](http://issuestats.com/github/microsoft/typescript-runtime)
+[![Issue Stats](http://issuestats.com/github/Microsoft/TypeScript-Runtime/badge/issue)](http://issuestats.com/github/microsoft/typescript-runtime)
 
-This package name is not currently in use, but was formerly occupied
-by another package. To avoid malicious use, npm is hanging on to the
-package name, but loosely, and we'll probably give it to you if you
-want it.
+# Runtime
 
-You may adopt this package by contacting [e-mail] and
-requesting the name.
+This is a runtime library for [TypeScript](http://www.typescriptlang.org/) that contains all of the TypeScript helper functions.
+
+# Installing
+
+For the latest stable version:
+
+```
+npm install tslib
+```
+
+# Usage
+
+Set the `noEmitHelpers` compiler option on the command line or in your tsconfig.json:
+```
+tsc --noEmitHelpers
+```
+
+Import tslib in your TypeScript sources:
+```ts
+import * as tslib from "tslib";
+
+const __extends = tslib.__extends;
+const __awaiter = tslib.__awaiter;
+
+...
+```
+
+Or use it globally on the web via `<script src="tslib.js"></script>`:
+
+```ts
+// <reference path="tslib.global.d.ts" />
+var __extends = __tslib.__extends;
+var __awaiter = __tslib.__awaiter;
+
+...
+```
+
+## Contribute
+
+There are many ways to [contribute](https://github.com/Microsoft/TypeScript/blob/master/CONTRIBUTING.md) to TypeScript.
+* [Submit bugs](https://github.com/Microsoft/TypeScript/issues) and help us verify fixes as they are checked in.
+* Review the [source code changes](https://github.com/Microsoft/TypeScript/pulls).
+* Engage with other TypeScript users and developers on [StackOverflow](http://stackoverflow.com/questions/tagged/typescript).
+* Join the [#typescript](http://twitter.com/#!/search/realtime/%23typescript) discussion on Twitter.
+* [Contribute bug fixes](https://github.com/Microsoft/TypeScript/blob/master/CONTRIBUTING.md).
+* Read the language specification ([docx](http://go.microsoft.com/fwlink/?LinkId=267121), [pdf](http://go.microsoft.com/fwlink/?LinkId=267238)).
+
+
+## Documentation
+
+*  [Quick tutorial](http://www.typescriptlang.org/Tutorial)
+*  [Programming handbook](http://www.typescriptlang.org/Handbook)
+*  [Language specification](https://github.com/Microsoft/TypeScript/blob/master/doc/spec.md)
+*  [Homepage](http://www.typescriptlang.org/)

New alerts

New author

Supply chain risk

A new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.

Found 1 instance in 1 package

spdx disjunction for an artifact's license information

License

spdx disjunction for an artifact's license information

Found 1 instance in 1 package

Fixed alerts

Empty package

Supply chain risk

Package does not contain any code. It may be removed, is name squatting, or the result of a faulty package publish.

Found 1 instance in 1 package

spdx disjunction for an artifact's license information

License

spdx disjunction for an artifact's license information

Found 1 instance in 1 package

No contributors or author data

Maintenance

Package does not specify a list of contributors or an author in package.json.

Found 1 instance in 1 package

No tests

Quality

Package does not have any tests. This is a strong signal of a poorly maintained or low quality package.

Found 1 instance in 1 package

No v1

Quality

Package is not semver >=1. This means it is not stable and does not support ^ ranges.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

21210

increased by2561.23%

Number of package files

9

increased by350%

Lines of code

136

increased byInfinity%

Number of low maintenance alerts

0

decreased by-100%

Number of low quality alerts

0

decreased by-100%

Number of lines in readme file

59

increased by490%

No dependency changes