yaml - npm Package Compare versions

Comparing version 0.3.0 to 1.0.0-beta.1

package.json

 {
   "name": "yaml",
-  "version": "0.3.0",
-  "description": "Yaml parser",
-  "author": "TJ Holowaychuk <[e-mail]>",
-  "maintainers": [
-    "Joshua Boy Nicolai Appelman <[e-mail]> (jbna.nl)"
+  "version": "1.0.0-beta.1",
+  "main": "dist/index.js",
+  "license": "ISC",
+  "author": "Eemeli Aro <[e-mail]>",
+  "repository": "github:eemeli/yaml",
+  "description": "JavaScript parser and stringifier for YAML 1.2",
+  "keywords": [
+    "YAML",
+    "parser",
+    "stringifier"
   ],
-  "main": "./lib/yaml.js",
-  "repository": "tj/js-yaml",
-  "license": "MIT"
+  "homepage": "https://github.com/eemeli/yaml#readme",
+  "files": [
+    "dist/"
+  ],
+  "scripts": {
+    "build": "babel src/ --out-dir dist/",
+    "test": "TRACE_LEVEL=log jest",
+    "test:trace": "TRACE_LEVEL=trace,log jest --no-cache",
+    "preversion": "npm test && npm run build",
+    "version": "git commit -am \"Update version\" && git add -f dist/",
+    "postversion": "git reset --hard HEAD^",
+    "prepublishOnly": "npm test && npm run build"
+  },
+  "babel": {
+    "presets": [
+      "@babel/env",
+      "@babel/stage-3"
+    ],
+    "plugins": [
+      [
+        "trace",
+        {
+          "strip": true
+        }
+      ]
+    ]
+  },
+  "jest": {
+    "testPathIgnorePatterns": [
+      "__tests__/common"
+    ]
+  },
+  "devDependencies": {
+    "@babel/cli": "^7.0.0-beta.37",
+    "@babel/core": "^7.0.0-beta.37",
+    "@babel/preset-env": "^7.0.0-beta.37",
+    "@babel/preset-stage-3": "^7.0.0-beta.37",
+    "babel-core": "^7.0.0-bridge.0",
+    "babel-jest": "^22.0.6",
+    "babel-plugin-trace": "eemeli/babel-plugin-trace#babel7-build",
+    "jest": "^22.0.6"
+  },
+  "dependencies": {
+    "raw-yaml": "^0.2.3"
+  }
 }

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Major refactor

Supply chain risk

Package has recently undergone a major refactor. It may be unstable or indicate significant internal changes. Use caution when updating to versions that include significant changes.

Found 1 instance in 1 package

New author

Supply chain risk

A new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.

Found 1 instance in 1 package

No repository

Supply chain risk

Package does not have a linked source code repository. Without this field, a package will have no reference to the location of the source code use to generate the package.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

New author

Supply chain risk

A new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.

Found 1 instance in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

No repository

Supply chain risk

Package does not have a linked source code repository. Without this field, a package will have no reference to the location of the source code use to generate the package.

Found 1 instance in 1 package

No website

Quality

Package does not have a website.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

67623

increased by376.45%

Number of package files

19

increased by26.67%

Lines of code

1519

increased by331.53%

Number of low quality alerts

1

decreased by-50%

Number of lines in readme file

83

increased by48.21%

Number of low supply chain risk alerts

1

decreased by-50%

Worsened metrics

Dependency count

1

increased byInfinity%

Dev dependency count

8

increased byInfinity%

Number of medium supply chain risk alerts

2

increased by100%

Dependency changes

• + Addedraw-yaml@^0.2.3

• + Addedraw-yaml@0.2.5(transitive)