@carbon/layout - npm Package Compare versions

Comparing version 10.2.0 to 10.3.0-alpha.5323

package.json

 {
   "name": "@carbon/layout",
   "description": "Layout helpers for digital and software products using the Carbon Design System",
-  "version": "10.2.0",
+  "version": "10.3.0-alpha.5323+68851267",
   "license": "Apache-2.0",
   "main": "lib/index.js",
   "module": "es/index.js",
-  "repository": "https://github.com/IBM/carbon-elements/tree/master/packages/layout",
-  "bugs": "https://github.com/IBM/carbon-elements/issues",
+  "repository": "https://github.com/carbon-design-system/carbon/tree/master/packages/layout",
+  "bugs": "https://github.com/carbon-design-system/carbon/issues",
   "keywords": [
@@ -16,3 +16,5 @@ "eyeglass-module",
     "carbon-elements",
-    "carbon-design-system"
+    "carbon-design-system",
+    "components",
+    "react"
   ],
@@ -27,3 +29,3 @@ "publishConfig": {
   "devDependencies": {
-    "@carbon/bundler": "10.2.0",
+    "@carbon/bundler": "^10.3.0-alpha.5323+68851267",
     "rimraf": "^2.6.2"
@@ -37,3 +39,3 @@ },
   },
-  "gitHead": "e71825a0cf44f6f41fee7d2b0dd9c57d7bda126a"
+  "gitHead": "68851267b6c64a53cd0261d2ea6c009960376dbb"
 }

README.md

@@ -54,3 +54,3 @@ # @carbon/layout
 or help us improve the project documentation. If you're interested, definitely
-check out our [Contributing Guide](/.github/CONTRIBUTING.md) ! 👀
+check out our [Contributing Guide](/.github/CONTRIBUTING.md)! 👀
 
@@ -57,0 +57,0 @@ ## 📝 License

New alerts

Manifest confusion

Supply chain risk

This package has inconsistent metadata. This could be malicious or caused by an error when publishing the package.

Found 1 instance in 1 package

New author

Supply chain risk

A new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.

Found 1 instance in 1 package

No bug tracker

Maintenance

Package does not have a linked bug tracker in package.json.

Found 1 instance in 1 package

No repository

Supply chain risk

Package does not have a linked source code repository. Without this field, a package will have no reference to the location of the source code use to generate the package.

Found 1 instance in 1 package

No v1

Quality

Package is not semver >=1. This means it is not stable and does not support ^ ranges.

Found 1 instance in 1 package

Fixed alerts

No bug tracker

Maintenance

Package does not have a linked bug tracker in package.json.

Found 1 instance in 1 package

No repository

Supply chain risk

Package does not have a linked source code repository. Without this field, a package will have no reference to the location of the source code use to generate the package.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

104991

increased by0.08%

Worsened metrics

Number of low quality alerts

2

increased by100%

Number of medium supply chain risk alerts

2

increased byInfinity%

No dependency changes