@bonniernews/local-esi
Advanced tools
@bonniernews/local-esi - npm Package Compare versions
Comparing version 1.2.5 to 1.2.6
@@ -9,2 +9,6 @@ # Changelog | ||
| ## [1.2.6] - 2021-02-16 | ||
| ### Changed | ||
| - Change protocol of atlas-html-stream dependency | ||
| ## [1.2.5] - 2021-01-26 | ||
@@ -11,0 +15,0 @@ ### Changed |
| { | ||
| "name": "@bonniernews/local-esi", | ||
| "version": "1.2.5", | ||
| "version": "1.2.6", | ||
| "description": "Local Edge Side Includes parser", | ||
@@ -24,3 +24,3 @@ "main": "index.js", | ||
| "dependencies": { | ||
| "atlas-html-stream": "git://github.com/BonnierNews/atlas-html-stream.git", | ||
| "atlas-html-stream": "https://github.com/BonnierNews/atlas-html-stream.git", | ||
| "pump": "^3.0.0", | ||
@@ -27,0 +27,0 @@ "pumpify": "^2.0.1", |
New alerts
License Policy Violation
LicenseThis package is not allowed per your license policy. Review the package's license to ensure compliance.
Found 1 instance in 1 package
HTTP dependency
Supply chain riskContains a dependency which resolves to a remote HTTP URL which could be used to inject untrusted code and reduce overall package reliability.
Found 1 instance in 1 package
Manifest confusion
Supply chain riskThis package has inconsistent metadata. This could be malicious or caused by an error when publishing the package.
Found 1 instance in 1 package
Fixed alerts
License Policy Violation
LicenseThis package is not allowed per your license policy. Review the package's license to ensure compliance.
Found 1 instance in 1 package
Git dependency
Supply chain riskContains a dependency which resolves to a remote git URL. Dependencies fetched from git URLs are not immutable and can be used to inject untrusted code or reduce the likelihood of a reproducible install.
Found 1 instance in 1 package
Improved metrics
- Total package byte prevSize
- increased by0.17%
51547
Worsened metrics
- Number of medium supply chain risk alerts
- increased byInfinity%
1