whoosh - npm Package Compare versions

Comparing version 1.1.2 to 1.1.3

CHANGELOG.md

 # Change Log
 
-## [1.1.2]
+## 1.1.3
 ### Changed
+- Housekeeping
+
+## 1.1.2
+### Changed
 - Update dependencies
 
-## [1.1.1]
+## 1.1.1
 ### Changed
 - Fixing typo in readme
 
-## [1.1.0]
+## 1.1.0
 ### Added
 - Adding travis build
 
-## [1.0.0]
-### [Changed]
+## 1.0.0
+### Changed
 - General Tidy Up
 
 The format is based on [Keep a Changelog](http://keepachangelog.com/)

package.json

 {
   "name": "whoosh",
-  "version": "1.1.2",
+  "version": "1.1.3",
   "description": "A streaming sftp client",
@@ -10,5 +10,5 @@ "main": "index.js",
     "istanbul": "istanbul cover --report html --report lcov _mocha",
-    "codeclimate": "codeclimate-test-reporter < coverage/lcov.info",
-    "precommit": "npm run lint",
-    "prepush": "npm test",
+    "codeclimate": "(test -e .codeclimate && npm run istanbul && source .codeclimate) || echo skipping codeclimate",
+    "precommit": "npm run lint && npm test",
+    "prepush": "npm run codeclimate",
     "docker": "docker-compose up -d"
@@ -24,16 +24,16 @@ },
   "devDependencies": {
-    "async": "^2.5.0",
+    "async": "^2.6.0",
     "chai": "^4.1.2",
-    "codeclimate-test-reporter": "^0.5.0",
-    "eslint": "^4.10.0",
+    "eslint": "^4.19.1",
     "eslint-config-imperative": "^2.0.1",
     "eslint-plugin-imperative": "^2.0.0",
-    "fs-extra": "^4.0.2",
+    "fs-extra": "^4.0.3",
     "husky": "^0.14.3",
-    "mocha": "^4.0.1"
+    "istanbul": "^0.4.5",
+    "mocha": "^5.1.1"
   },
   "dependencies": {
     "debug": "^3.1.0",
-    "lodash": "^4.17.4",
-    "ssh2": "^0.5.5"
+    "lodash": "^4.17.10",
+    "ssh2": "^0.6.1"
   },
@@ -40,0 +40,0 @@ "directories": {

New alerts

Major refactor

Supply chain risk

Package has recently undergone a major refactor. It may be unstable or indicate significant internal changes. Use caution when updating to versions that include significant changes.

Found 1 instance in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

Fixed alerts

Major refactor

Supply chain risk

Package has recently undergone a major refactor. It may be unstable or indicate significant internal changes. Use caution when updating to versions that include significant changes.

Found 1 instance in 1 package

New author

Supply chain risk

A new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

21825

increased by74.73%

Number of package files

15

increased by36.36%

Lines of code

323

increased by223%

Number of medium supply chain risk alerts

1

decreased by-50%

Worsened metrics

Number of low supply chain risk alerts

1

increased byInfinity%

Dependency changes

• + Addedssh2@0.6.2(transitive)

• + Addedssh2-streams@0.2.1(transitive)

• - Removedssh2@0.5.5(transitive)

• - Removedssh2-streams@0.1.20(transitive)

• Updatedlodash@^4.17.10

• Updatedssh2@^0.6.1