veplayer-mp-douyin - npm Package Compare versions

Comparing version 1.0.2-alpha.4 to 1.0.2

dist/index.js

@@ -224,4 +224,3 @@ "use strict";
         ready() {
-            const { controls, playBtnPosition } = this.properties;
-            const { loadedMeta, paused } = this.data;
+            const { controls } = this.properties;
             this.updateStatusOfShowLoading();
@@ -228,0 +227,0 @@ // console.log(`!!!!!Player${this.data.videoId} ready`, `controls:${controls}`, `data.controls:${this.data.controls}`)

package.json

 {
   "name": "veplayer-mp-douyin",
-  "version": "1.0.2-alpha.4",
+  "version": "1.0.2",
   "license": "MIT",
@@ -13,3 +13,2 @@ "miniprogramType": "tt-npm",
     "dist",
-    "postinstall.js",
     "README.md"
@@ -20,4 +19,3 @@ ],
     "release:alpha": "npm version prerelease --preid=alpha && npm run build && npm publish --tag alpha --registry=https://registry.npmjs.org",
-    "build": "TRANSFORM_TYPE=douyin gulp -f ../../scripts/gulp.file.ts --cwd ../../packages/douyin/",
-    "postinstall": "node postinstall.js"
+    "build": "TRANSFORM_TYPE=douyin gulp -f ../../scripts/gulp.file.ts --cwd ../../packages/douyin/"
   },
@@ -32,5 +30,7 @@ "main": "src/index.js",
     "eventemitter3": "^5.0.1",
-    "xgplayer-service-miniprogram": "^0.4.0",
+    "xgplayer-service-miniprogram": "^0.4.0"
+  },
+  "devDependencies": {
     "fs-extra": "^11.1.1"
   }
 }

Fixed alerts

Install scripts

Supply chain risk

Install scripts are run when the package is installed. The majority of malware in npm is hidden in install scripts.

Found 1 instance in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

No v1

Quality

Package is not semver >=1. This means it is not stable and does not support ^ ranges.

Found 1 instance in 1 package

Improved metrics

Dependency count

2

decreased by-33.33%

Number of low quality alerts

1

decreased by-50%

Number of high supply chain risk alerts

0

decreased by-100%

Number of low supply chain risk alerts

1

decreased by-50%

Worsened metrics

Total package byte prevSize

130011

decreased by-1.08%

Dev dependency count

1

increased byInfinity%

Number of package files

54

decreased by-1.82%

Lines of code

1977

decreased by-1.74%

Dependency changes

• - Removedfs-extra@^11.1.1

• - Removedfs-extra@11.3.0(transitive)

• - Removedgraceful-fs@4.2.11(transitive)

• - Removedjsonfile@6.1.0(transitive)

• - Removeduniversalify@2.0.1(transitive)