@bettercorp/tools - npm Package Compare versions

Comparing version 1.0.7 to 1.0.8

package.json

@@ -17,3 +17,3 @@ {
   "main": "lib/index.js",
-  "version": "1.0.7",
+  "version": "1.0.8",
   "dependencies": {
@@ -20,0 +20,0 @@ "@types/node": "^14.10.2",

New alerts

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

Fixed alerts

New author

Supply chain risk

A new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

66496

increased by3.46%

Number of package files

18

increased by20%

Lines of code

454

increased by7.58%

Number of medium supply chain risk alerts

0

decreased by-100%

Worsened metrics

Number of low supply chain risk alerts

2

increased by100%

No dependency changes