@agoric/promise-kit
Advanced tools
@agoric/promise-kit - npm Package Compare versions
Comparing version 0.2.29-dev-23c942c.0 to 0.2.29-dev-8002489.0
| { | ||
| "name": "@agoric/promise-kit", | ||
| "version": "0.2.29-dev-23c942c.0+23c942c", | ||
| "version": "0.2.29-dev-8002489.0+8002489", | ||
| "description": "Helper for making promises", | ||
@@ -34,3 +34,3 @@ "type": "module", | ||
| "dependencies": { | ||
| "@agoric/eventual-send": "0.13.31-dev-23c942c.0+23c942c" | ||
| "@agoric/eventual-send": "0.13.31-dev-8002489.0+8002489" | ||
| }, | ||
@@ -65,3 +65,3 @@ "devDependencies": { | ||
| }, | ||
| "gitHead": "23c942cfc7eac8b214ad2dba591745e99abe3966" | ||
| "gitHead": "8002489fdfccf4772e76707cac456934868b0793" | ||
| } |
New alerts
License Policy Violation
LicenseThis package is not allowed per your license policy. Review the package's license to ensure compliance.
Found 1 instance in 1 package
Manifest confusion
Supply chain riskThis package has inconsistent metadata. This could be malicious or caused by an error when publishing the package.
Found 1 instance in 1 package
New author
Supply chain riskA new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.
Found 1 instance in 1 package
Fixed alerts
License Policy Violation
LicenseThis package is not allowed per your license policy. Review the package's license to ensure compliance.
Found 1 instance in 1 package
Manifest confusion
Supply chain riskThis package has inconsistent metadata. This could be malicious or caused by an error when publishing the package.
Found 1 instance in 1 package
Worsened metrics
- Number of medium supply chain risk alerts
- increased by100%
2