veplayer-mp-douyin - npm Package Compare versions

Comparing version 1.2.7-rc.0 to 1.2.7

package.json

 {
   "name": "veplayer-mp-douyin",
-  "version": "1.2.7-rc.0",
-  "license": "MIT",
-  "miniprogramType": "tt-npm",
-  "description": "小程序播放器抖音原生版",
+  "version": "1.2.7",
+  "dependencies": {
+    "eventemitter3": "^5.0.1",
+    "xgplayer-service-miniprogram": "^0.5.0"
+  },
   "main": "./index.js",
@@ -13,16 +14,7 @@ "exports": {
   },
-  "dependencies": {
-    "eventemitter3": "^5.0.1",
-    "xgplayer-service-miniprogram": "^0.5.0"
-  },
-  "devDependencies": {
-    "@byted/lux-core": "^1.3.0",
-    "@byted/lux-cli": "^1.2.3"
-  },
+  "types": "./index.d.ts",
+  "license": "MIT",
   "scripts": {
-    "build": "TRANSFORM_TYPE=douyin gulp -f ../../scripts/gulp.file.ts --cwd .",
-    "postinstall": "node postinstall.js",
-    "postbuild": "lux release commit",
-    "version:rc": "lux version --preid rc"
+    "postinstall": "node postinstall.js"
   }
 }

README.md

@@ -387,3 +387,3 @@ # Veplayer小程序播放器
 ## 短剧行业能力
-播放器继承了抖音[短剧行业能力](https://bytedance.feishu.cn/docx/UXxUdWNawoGPgkx06EacdM44ncc?useIframe=1)，使用方法参照以下说明：
+播放器继承了抖音[短剧行业能力](https://xxxx.xxxx.cn/docx/UXxUdWNawoGPgkx06EacdM44ncc?useIframe=1)，使用方法参照以下说明：
 ### 前提条件
@@ -390,0 +390,0 @@ 按照[官网文档](https://developer.open-douyin.com/docs/resource/zh-CN/mini-app/develop/guide/industry-ability/industrySDK/)配置行业 SDK 的权限配置。

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Deprecated

Maintenance

The maintainer of the package marked it as deprecated. This could indicate that a single version should not be used, or that the package is no longer maintained and any new vulnerabilities will not be fixed.

Found 1 instance in 1 package

Major refactor

Supply chain risk

Package has recently undergone a major refactor. It may be unstable or indicate significant internal changes. Use caution when updating to versions that include significant changes.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Native code

Supply chain risk

Contains native code (e.g., compiled binaries or shared libraries). Including native code can obscure malicious behavior.

Found 1 instance in 1 package

No v1

Quality

Package is not semver >=1. This means it is not stable and does not support ^ ranges.

Found 1 instance in 1 package

Improved metrics

Dev dependency count

0

decreased by-100%

Number of low quality alerts

1

decreased by-50%

Number of high supply chain risk alerts

1

decreased by-50%

Number of low supply chain risk alerts

2

decreased by-33.33%

Worsened metrics

Total package byte prevSize

167110

decreased by-50.78%

Number of package files

60

decreased by-50.82%

Lines of code

3075

decreased by-44.29%

Number of medium maintenance alerts

1

increased byInfinity%

No dependency changes