zoid - npm Package Compare versions

Comparing version 1.0.0 to 6.0.61

package.json

 {
   "name": "zoid",
-  "version": "1.0.0",
-  "description": "",
+  "version": "6.0.61",
+  "description": "Cross domain components.",
   "main": "index.js",
   "scripts": {
-    "test": "echo \"Error: no test specified\" && exit 1"
+    "setup": "npm install && npm run flow-typed",
+    "demo": "serve . --port 1337",
+    "lint": "eslint src/ test/ *.js",
+    "flow-typed": "flow-typed install",
+    "flow": "flow",
+    "flow:build": "flow gen-flow-files ./src/index.js --out-dir ./dist/module",
+    "karma": "cross-env NODE_ENV=test babel-node --plugins=transform-es2015-modules-commonjs ./node_modules/.bin/karma start",
+    "babel": "babel src/ --out-dir dist/module",
+    "webpack": "babel-node --plugins=transform-es2015-modules-commonjs ./node_modules/.bin/webpack --progress",
+    "test": "npm run lint && npm run flow-typed && npm run flow && npm run karma",
+    "build": "npm run test && npm run babel && npm run webpack",
+    "release": "./publish.sh",
+    "release:patch": "./publish.sh patch",
+    "release:minor": "./publish.sh minor",
+    "release:major": "./publish.sh major",
+    "clean": "rimraf dist coverage",
+    "reinstall": "rimraf flow-typed && rimraf node_modules && npm install && flow-typed install",
+    "debug": "cross-env NODE_ENV=debug"
   },
   "repository": {
     "type": "git",
-    "url": "git+https://github.com/krakenjs/zoid.git"
+    "url": "git://github.com/krakenjs/zoid.git"
   },
-  "author": "",
-  "license": "ISC",
-  "bugs": {
-    "url": "https://github.com/krakenjs/zoid/issues"
+  "keywords": [
+    "cross-domain",
+    "cross domain",
+    "components",
+    "component",
+    "krakenjs",
+    "kraken"
+  ],
+  "licenses": [
+    {
+      "type": "Apache 2.0",
+      "url": "http://www.apache.org/licenses/LICENSE-2.0.html"
+    }
+  ],
+  "files": [
+    "dist/",
+    "src/",
+    "globals.js"
+  ],
+  "readmeFilename": "README.md",
+  "devDependencies": {
+    "flow-bin": "^0.70.0",
+    "grumbler-scripts": "^2.0.19",
+    "mocha": "^3.5.0",
+    "serve": "^6.5.6"
   },
-  "homepage": "https://github.com/krakenjs/zoid#readme"
+  "dependencies": {
+    "beaver-logger": "^3.0.11",
+    "cross-domain-safe-weakmap": "^1.0.19",
+    "cross-domain-utils": "^2.0.3",
+    "hi-base32": "^0.5.0",
+    "post-robot": "^8.0.14",
+    "zalgo-promise": "^1.0.22"
+  }
 }

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Major refactor

Supply chain risk

Package has recently undergone a major refactor. It may be unstable or indicate significant internal changes. Use caution when updating to versions that include significant changes.

Found 1 instance in 1 package

Uses eval

Supply chain risk

Package uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 1 instance in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

No contributors or author data

Maintenance

Package does not specify a list of contributors or an author in package.json.

Found 1 instance in 1 package

No bug tracker

Maintenance

Package does not have a linked bug tracker in package.json.

Found 1 instance in 1 package

No website

Quality

Package does not have a website.

Found 1 instance in 1 package

Unidentified License

License

(Experimental) Something that seems like a license was found, but its contents could not be matched with a known license.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Empty package

Supply chain risk

Package does not contain any code. It may be removed, is name squatting, or the result of a faulty package publish.

Found 1 instance in 1 package

No README

Quality

Package does not have a README. This may indicate a failed publish or a low quality package.

Found 1 instance in 1 package

No tests

Quality

Package does not have any tests. This is a strong signal of a poorly maintained or low quality package.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

1466948

increased by346696.22%

Number of package files

89

increased by4350%

Lines of code

29128

increased byInfinity%

Number of medium quality alerts

0

decreased by-100%

Number of lines in readme file

186

increased byInfinity%

Worsened metrics

Dependency count

6

increased byInfinity%

Dev dependency count

4

increased byInfinity%

Number of low license alerts

1

increased byInfinity%

License quality

80

decreased by-20%

Number of low maintenance alerts

2

increased by100%

Number of low supply chain risk alerts

2

increased byInfinity%

Number of medium supply chain risk alerts

2

increased by100%

Dependency changes

• + Addedbeaver-logger@^3.0.11

• + Addedcross-domain-safe-weakmap@^1.0.19

• + Addedcross-domain-utils@^2.0.3

• + Addedhi-base32@^0.5.0

• + Addedpost-robot@^8.0.14

• + Addedzalgo-promise@^1.0.22

• + Addedbeaver-logger@3.0.19(transitive)

• + Addedcross-domain-safe-weakmap@1.0.29(transitive)

• + Addedcross-domain-utils@2.0.38(transitive)

• + Addedhi-base32@0.5.1(transitive)

• + Addedpost-robot@8.0.32(transitive)

• + Addedzalgo-promise@1.0.48(transitive)