tsup - npm Package Compare versions

Comparing version 1.1.0 to 1.2.0

package.json

 {
   "name": "tsup",
-  "version": "1.1.0",
+  "version": "1.2.0",
   "main": "dist/index.js",
@@ -12,11 +12,15 @@ "bin": "dist/cli.js",
   "scripts": {
-    "build": "esbuild src/cli.ts --platform=node --outdir=dist --format=cjs --target=es2018 --external:rollup --external:rollup-plugin-esbuild --bundle",
-    "prepublishOnly": "npm run build"
+    "build": "rm -rf dist && esbuild src/cli.ts --platform=node --outdir=dist --format=cjs --target=es2018 --external:rollup --external:rollup-plugin-esbuild --external:typescript --bundle && chmod +x dist/cli.js",
+    "prepublishOnly": "npm run build",
+    "test": "npm run build && jest"
   },
   "dependencies": {
-    "rollup": "^2.8.2",
-    "rollup-plugin-esbuild": "^1.3.1"
+    "rollup": "^2.10.0",
+    "rollup-plugin-esbuild": "^1.4.1"
   },
   "devDependencies": {
     "@rollup/plugin-commonjs": "^11.1.0",
+    "rollup-plugin-dts": "^1.4.2",
+    "@types/fs-extra": "^8.1.0",
+    "@types/jest": "^25.2.1",
     "@types/node": "^13.9.2",
@@ -26,6 +30,11 @@ "@types/resolve": "^1.17.0",
     "colorette": "^1.1.0",
+    "execa": "^4.0.1",
+    "fs-extra": "^9.0.0",
+    "jest": "^26.0.1",
+    "prettier": "^2.0.5",
     "resolve": "^1.17.0",
     "rollup-plugin-hashbang": "^2.2.2",
+    "ts-jest": "^25.5.1",
     "typescript": "^3.8.3"
   }
 }

New alerts

Shell access

Supply chain risk

This module accesses the system shell. Accessing the system shell increases the risk of executing arbitrary code.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 1 instance in 1 package

High entropy strings

Supply chain risk

Contains high entropy strings. This could be a sign of encrypted data, leaked secrets or obfuscated code.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

440540

increased by36.45%

Lines of code

12967

increased by35.45%

Worsened metrics

Dev dependency count

16

increased by100%

Number of low supply chain risk alerts

22

increased by29.41%

Number of medium supply chain risk alerts

1

increased byInfinity%

Dependency changes

• Updatedrollup@^2.10.0

• Updatedrollup-plugin-esbuild@^1.4.1