Skip to content
Permalink

Comparing changes

Choose two branches to see what’s changed or to start a new pull request. If you need to, you can also or learn more about diff comparisons.

Open a pull request

Create a new pull request by comparing changes across two branches. If you need to, you can also . Learn more about diff comparisons here.
base repository: ritz078/rollup-plugin-filesize
Failed to load repositories. Confirm that selected base ref is valid, then try again.
Loading
base: aabc032d7c73db11b153dc0be31fb59030419791
Choose a base ref
...
head repository: ritz078/rollup-plugin-filesize
Failed to load repositories. Confirm that selected head ref is valid, then try again.
Loading
compare: decf194e804ed75f67c7695cf05b50ce0852e332
Choose a head ref
  • 3 commits
  • 2 files changed
  • 3 contributors

Commits on Sep 2, 2021

  1. docs(readme): fix quotes (#102)

    @Haroenv
    Haroenv authored Sep 2, 2021

    Verified

    This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
    GPG key ID: 4AEE18F83AFDEB23
    Expired
    Verified
    Learn about vigilant mode
    Copy the full SHA
    b665e86 View commit details

Commits on Jan 10, 2022

  1. fix: pin colors@1.4.0 (#104) 

    A Security Vuln was identified in the Colors package for >1.4.0, offending packages being `1.4.1`, `1.4.44-liberty`
- [source1](https://twitter.com/snyksec/status/1480286811482206216?ref_src=twsrc%5Egoogle%7Ctwcamp%5Eserp%7Ctwgr%5Etweet)
- [source2](https://twitter.com/snyksec/status/1480286811482206216?ref_src=twsrc%5Egoogle%7Ctwcamp%5Eserp%7Ctwgr%5Etweet)
- [source3](https://security.snyk.io/vuln/SNYK-JS-COLORS-2331906)

This PR pins the color package to `1.4.0` as advised on the [snyk page](https://snyk.io/blog/open-source-maintainer-pulls-the-plug-on-npm-packages-colors-and-faker-now-what/)
    @mannyluvstacos
    mannyluvstacos authored Jan 10, 2022

    Verified

    This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
    GPG key ID: 4AEE18F83AFDEB23
    Expired
    Verified
    Learn about vigilant mode
    Copy the full SHA
    dd1fd96 View commit details

  2. 9.1.2

    @ritz078
    ritz078 committed Jan 10, 2022

    Verified

    This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
    GPG key ID: 4AEE18F83AFDEB23
    Expired
    Verified
    Learn about vigilant mode
    Copy the full SHA
    decf194 View commit details
Showing with 3 additions and 3 deletions.
  1. +1 −1 Readme.md
  2. +2 −2 package.json
2 changes: 1 addition & 1 deletion Readme.md
View file
Original file line number Diff line number Diff line change
@@ -51,7 +51,7 @@ Whether to show [Brotli](https://www.wikiwand.com/en/Brotli) size or not

**Note: this feature is experimental and may be changed in a future release.**

type: `"release", ``"build"`, or `"none"`
type: `"release"`, `"build"`, or `"none"`
default: `"none"`

Indicates how, if any, comparisons will be shown between the
4 changes: 2 additions & 2 deletions package.json
View file
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
{
"name": "rollup-plugin-filesize",
"version": "9.1.1",
"version": "9.1.2",
"description": "A rollup plugin to show filesize in the cli",
"main": "dist/index.js",
"module": "src/index.js",
@@ -41,7 +41,7 @@
"@babel/runtime": "^7.13.8",
"boxen": "^5.0.0",
"brotli-size": "4.0.0",
"colors": "^1.4.0",
"colors": "1.4.0",
"filesize": "^6.1.0",
"gzip-size": "^6.0.0",
"pacote": "^11.2.7",