web-tree-sitter - npm Package Compare versions

Comparing version 0.20.7 to 0.20.8

package.json

 {
   "name": "web-tree-sitter",
-  "version": "0.20.7",
+  "version": "0.20.8",
   "description": "Tree-sitter bindings for the web",
@@ -30,6 +30,6 @@ "main": "tree-sitter.js",
   "devDependencies": {
-    "chai": "^4.2.0",
-    "mocha": "^6.1.4",
-    "terser": "^3.17.0"
+    "chai": "^4.3.7",
+    "mocha": "^10.2.0",
+    "terser": "^5.16.6"
   }
 }

README.md

 Web Tree-sitter
 ===============
 
-[![Build Status](https://travis-ci.org/tree-sitter/tree-sitter.svg?branch=master)](https://travis-ci.org/tree-sitter/tree-sitter)
-
 WebAssembly bindings to the [Tree-sitter](https://github.com/tree-sitter/tree-sitter) parsing library.
@@ -7,0 +5,0 @@

New alerts

New author

Supply chain risk

A new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.

Found 1 instance in 1 package

Uses eval

Supply chain risk

Package uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Found 1 instance in 1 package

Fixed alerts

Major refactor

Supply chain risk

Package has recently undergone a major refactor. It may be unstable or indicate significant internal changes. Use caution when updating to versions that include significant changes.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

272156

increased by10.77%

Lines of code

437

increased by19.4%

Published versions last months

3

increased by200%

Worsened metrics

Number of lines in readme file

187

decreased by-1.06%

No dependency changes