- Big update!Introducing GitHub Bot Commands. Learn more →
Semver anomaly
Severity
Medium
Description
Package semver skipped several versions, this could indicate a dependency confusion attack or indicate the intention of disruptive breaking changes or major priority shifts for the project.
Suggestion
Packages should follow semantic versions conventions by not skipping subsequent version numbers. Consumers should research the purpose of the skipped version number.
Packages with this issue
string_decoder
The string_decoder module from Node core
@types/node
TypeScript definitions for Node.js
@babel/code-frame
Generate errors that contain a code frame that point to source locations.
@babel/types
Babel Types is a Lodash-esque utility library for AST nodes
@babel/generator
Turns an AST into code.
@babel/runtime
babel's modular runtime helpers
@babel/highlight
Syntax highlight JavaScript strings for output in terminals.
@babel/traverse
The Babel Traverse module maintains the overall tree state, and is responsible for replacing, removing, and adding nodes
@babel/template
Generate an AST from a string template.