@agoric/eventual-send - npm Package Compare versions

Comparing version 0.13.31-dev-8002489.0 to 0.13.31-dev-f662032.0

package.json

 {
   "name": "@agoric/eventual-send",
-  "version": "0.13.31-dev-8002489.0+8002489",
+  "version": "0.13.31-dev-f662032.0+f662032",
   "description": "Extend a Promise class to implement the eventual-send API",
@@ -30,4 +30,4 @@ "type": "module",
   "devDependencies": {
-    "@agoric/assert": "0.3.15-dev-8002489.0+8002489",
-    "@agoric/lockdown": "0.1.1-dev-8002489.0+8002489",
+    "@agoric/assert": "0.3.15-dev-f662032.0+f662032",
+    "@agoric/lockdown": "0.1.1-dev-f662032.0+f662032",
     "@endo/ses-ava": "^0.2.8",
@@ -64,3 +64,3 @@ "ava": "^3.12.1",
   },
-  "gitHead": "8002489fdfccf4772e76707cac456934868b0793"
+  "gitHead": "f662032ab0da89725cd6626a4d7d376993141807"
 }

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Manifest confusion

Supply chain risk

This package has inconsistent metadata. This could be malicious or caused by an error when publishing the package.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Manifest confusion

Supply chain risk

This package has inconsistent metadata. This could be malicious or caused by an error when publishing the package.

Found 1 instance in 1 package

New author

Supply chain risk

A new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.

Found 1 instance in 1 package

Improved metrics

Number of medium supply chain risk alerts

1

decreased by-50%

No dependency changes