tsup - npm Package Compare versions

Comparing version 1.3.0 to 1.3.1

package.json

 {
   "name": "tsup",
-  "version": "1.3.0",
+  "version": "1.3.1",
   "main": "dist/index.js",
@@ -12,3 +12,3 @@ "bin": "dist/cli.js",
   "scripts": {
-    "build": "rm -rf dist && esbuild src/cli.ts --platform=node --outdir=dist --format=cjs --target=es2018 --external:rollup --external:rollup-plugin-esbuild --external:joycon --external:typescript --bundle && chmod +x dist/cli.js",
+    "build": "rm -rf dist && tsup src/cli.ts src/index.ts --external typescript --bundle",
     "prepublishOnly": "npm run build",
@@ -40,4 +40,5 @@ "test": "npm run build && jest"
     "ts-jest": "^25.5.1",
+    "tsup": "^1.3.0",
     "typescript": "^3.9.2"
   }
 }

New alerts

Major refactor

Supply chain risk

Package has recently undergone a major refactor. It may be unstable or indicate significant internal changes. Use caution when updating to versions that include significant changes.

Found 1 instance in 1 package

Shell access

Supply chain risk

This module accesses the system shell. Accessing the system shell increases the risk of executing arbitrary code.

Found 1 instance in 1 package

Debug access

Supply chain risk

Uses debug, reflection and dynamic code execution features.

Found 1 instance in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

Fixed alerts

Shell access

Supply chain risk

This module accesses the system shell. Accessing the system shell increases the risk of executing arbitrary code.

Found 1 instance in 1 package

Debug access

Supply chain risk

Uses debug, reflection and dynamic code execution features.

Found 1 instance in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

High entropy strings

Supply chain risk

Contains high entropy strings. This could be a sign of encrypted data, leaked secrets or obfuscated code.

Found 1 instance in 1 package

Improved metrics

Number of package files

6

increased by100%

Number of low supply chain risk alerts

11

decreased by-54.17%

Worsened metrics

Total package byte prevSize

385664

decreased by-16.27%

Dev dependency count

19

increased by5.56%

Lines of code

11299

decreased by-16.19%

Number of medium supply chain risk alerts

2

increased by100%

No dependency changes