@automattic/calypso-color-schemes - npm Package Compare versions

Comparing version 1.0.0 to 2.0.1

package.json

 {
 	"name": "@automattic/calypso-color-schemes",
-	"version": "1.0.0",
+	"version": "2.0.1",
 	"description": "Calypso Shared Style Bits",
@@ -28,6 +28,4 @@ "author": "Automattic",
 		"clean": "npx rimraf dist src/__color-studio",
-		"prepublish": "npm run clean",
 		"prepare": "node bin/prepare-sass-assets.js && node bin/build-css.js"
-	},
-	"gitHead": "444dfdb3d497eac2d5798b8afcf2de5a63fb6561"
+	}
 }

README.md

 # Calypso Color Schemes
 
-This package contains a number of CSS custom properties and Sass variables used in Calypso.
+This package contains a number of CSS custom properties used in Calypso.
 
+![Color scheme thumbnails]([e-mail])
+
 ## Installation
@@ -15,3 +17,1 @@
 properties.
-
-Alternatively, you may import the sass to use the variables directly: `@import 'src/shared/_colors';`

New alerts

New author

Supply chain risk

A new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.

Found 1 instance in 1 package

Copyleft License

License

(Experimental) Copyleft license information was found

Found 1 instance in 1 package

Non-permissive License

License

(Experimental) A license not known to be considered permissive was found

Found 1 instance in 1 package

Fixed alerts

New author

Supply chain risk

A new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.

Found 1 instance in 1 package

Copyleft License

License

(Experimental) Copyleft license information was found

Found 1 instance in 1 package

Dynamic require

Supply chain risk

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

Found 1 instance in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

Mixed license

License

(Experimental) Package contains multiple licenses.

Found 1 instance in 1 package

Non-permissive License

License

(Experimental) A license not known to be considered permissive was found

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

134103

increased by1.11%

Number of package files

15

increased by25%

Number of low license alerts

2

decreased by-33.33%

Lines of code

1479

increased by21.53%

Number of low supply chain risk alerts

0

decreased by-100%

No dependency changes