videojs-swf - npm Package Compare versions

Comparing version 4.3.0 to 4.3.1

Gruntfile.js

@@ -5,2 +5,16 @@ module.exports = function (grunt) {
     pkg: grunt.file.readJSON('package.json'),
+    bumpup: {
+      options: {
+        updateProps: {
+          pkg: 'package.json'
+        }
+      },
+      file: 'package.json'
+    },
+    tagrelease: {
+      file: 'package.json',
+      commit:  true,
+      message: 'Release %version%',
+      prefix:  'v'
+    },
     connect: {
@@ -124,3 +138,8 @@ dev: {
   grunt.loadNpmTasks('grunt-connect');
+  grunt.loadNpmTasks('grunt-bumpup');
+  grunt.loadNpmTasks('grunt-tagrelease');
 
+  grunt.registerTask('dist', ['mxmlc']);
+  grunt.registerTask('default', ['dist']);
+
   grunt.registerMultiTask('mxmlc', 'Compiling SWF', function () {
@@ -191,4 +210,55 @@ // Merge task-specific and/or target-specific options with these defaults.
 
-  grunt.registerTask('dist', ['mxmlc']);
-  grunt.registerTask('default', ['dist']);
-};
+  /**
+   * How releases work: 
+   * 
+   * Changes come from pullrequests to master or stable.
+   * They are tested then pulled into their base branch.
+   * A change log item is added to "Unreleased".
+   * In a minor/major release, master is merged into stable 
+   *   (possibly by way of a release branch if testing more).
+   *
+   * Check out stable if not already checked out.
+   * Run `grunt release:RELEASE_TYPE` 
+   *   RELEASE_TYPE = major, minor, or patch
+   *   Does the following:
+   *     Bump version
+   *     Build dist
+   *     Force add dist
+   *     Rotate changelog
+   *     Commit changes
+   *     Tag release
+   *
+   *  Staging should be merged back into master.
+   *  Push stable and master to origin.
+   *  Run `npm publish`.
+   */
+  grunt.registerTask('release', 'Bump, build, and tag', function(type) {
+    var shell = require('shelljs');
+
+    // major, minor, patch
+    type = type ? type : 'patch';
+
+    // git is required in add-dist, so check now
+    if (!shell.which('git')) {
+      grunt.fatal('Sorry, this script requires git');
+    }
+
+    if (shell.exec('git checkout stable').code !== 0) {
+      grunt.fatal('`git checkout stable` failed');
+    }
+
+    grunt.task.run('bumpup:' + type); // bump up the package version
+    grunt.task.run('dist');           // build distribution
+    grunt.task.run('add-dist');       // force add the distribution
+    grunt.task.run('tagrelease');     // commit & tag the changes
+  });
+
+  grunt.registerTask('add-dist', 'Force add the built distribution files', function(type) {
+    var shell = require('shelljs');
+
+    if (shell.exec('git add dist --force').code !== 0) {
+      grunt.fatal('`git add dist --force` failed');
+    }
+    grunt.log.writeln('dist directory staged (git add dist --force)');
+  });
+};

package.json

 {
   "name": "videojs-swf",
   "description": "The Flash-fallback video player for video.js (http://videojs.com)",
-  "version": "4.3.0",
+  "version": "4.3.1",
   "copyright": "Copyright 2014 Brightcove, Inc. https://github.com/videojs/video-js-swf/blob/master/LICENSE",
-  "keywords": ["flash", "video", "player"],
+  "keywords": [
+    "flash",
+    "video",
+    "player"
+  ],
   "homepage": "http://videojs.com",
   "author": "Brightcove",
-  "scripts": {
-    "install": "grunt mxmlc",
-    "postinstall": "grunt dist"
-  },
   "repository": {
@@ -17,7 +17,5 @@ "type": "git",
   },
-  "dependencies": {
+  "devDependencies": {
     "async": "~0.2.9",
-    "flex-sdk": "4.6.0"
-  },
-  "devDependencies": {
+    "flex-sdk": "4.6.0",
     "video.js": "4.3.0",
@@ -30,4 +28,7 @@ "grunt-cli": "~0.1.0",
     "grunt-contrib-qunit": "~0.2.1",
-    "qunitjs": "~1.12.0"
+    "qunitjs": "~1.12.0",
+    "grunt-bumpup": "~0.5.0",
+    "grunt-tagrelease": "~0.3.1",
+    "shelljs": "~0.2.6"
   }
-}
+}

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Install scripts

Supply chain risk

Install scripts are run when the package is installed. The majority of malware in npm is hidden in install scripts.

Found 2 instances in 1 package

Improved metrics

Total package byte prevSize

1044447

increased by0.2%

Dependency count

0

decreased by-100%

Lines of code

4568

increased by1.38%

Number of high supply chain risk alerts

0

decreased by-100%

Worsened metrics

Dev dependency count

13

increased by62.5%

Dependency changes

• - Removedasync@~0.2.9

• - Removedflex-sdk@4.6.0

• - Removedasync@0.2.10(transitive)