@carbon/layout - npm Package Compare versions

Comparing version 10.37.2 to 10.37.3

package.json

 {
   "name": "@carbon/layout",
   "description": "Layout helpers for digital and software products using the Carbon Design System",
-  "version": "10.37.2",
+  "version": "10.37.3",
   "license": "Apache-2.0",
@@ -29,6 +29,7 @@ "main": "lib/index.js",
     "build": "yarn clean && carbon-cli bundle src/index.js --name CarbonLayout && node tasks/build.js",
-    "clean": "rimraf es lib umd scss/generated scss/modules/generated"
+    "clean": "rimraf es lib umd scss/generated scss/modules/generated",
+    "postinstall": "ibmtelemetry --config=telemetry.yml"
   },
   "devDependencies": {
-    "@carbon/cli": "^10.34.2",
+    "@carbon/cli": "^10.34.3",
     "@carbon/cli-reporter": "^10.5.0",
@@ -46,3 +47,6 @@ "@carbon/scss-generator": "^10.13.0",
   },
-  "gitHead": "58041d7d41b49eb391ccd4ac4eaf635c923aab84"
+  "dependencies": {
+    "@ibm/telemetry-js": "^1.2.1"
+  },
+  "gitHead": "4e41819f51f1294d467e12995c217ed83f695249"
 }

README.md

@@ -53,1 +53,10 @@ # @carbon/layout
 Licensed under the [Apache 2.0 License](/LICENSE).
+
+## <picture><source height="20" width="20" media="(prefers-color-scheme: dark)" srcset="https://raw.githubusercontent.com/ibm-telemetry/telemetry-js/main/docs/images/ibm-telemetry-dark.svg"><source height="20" width="20" media="(prefers-color-scheme: light)" srcset="https://raw.githubusercontent.com/ibm-telemetry/telemetry-js/main/docs/images/ibm-telemetry-light.svg"><img height="20" width="20" alt="IBM Telemetry" src="https://raw.githubusercontent.com/ibm-telemetry/telemetry-js/main/docs/images/ibm-telemetry-light.svg"></picture> IBM Telemetry
+
+This package uses IBM Telemetry to collect metrics data. By installing this
+package as a dependency you are agreeing to telemetry collection. To opt out,
+see
+[Opting out of IBM Telemetry data collection](https://github.com/ibm-telemetry/telemetry-js/tree/main#opting-out-of-ibm-telemetry-data-collection).
+For more information on the data being collected, please see the
+[IBM Telemetry documentation](https://github.com/ibm-telemetry/telemetry-js/tree/main#ibm-telemetry-collection-basics).

New alerts

Install scripts

Supply chain risk

Install scripts are run when the package is installed. The majority of malware in npm is hidden in install scripts.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

79554

increased by1.87%

Number of package files

32

increased by3.23%

Number of lines in readme file

62

increased by16.98%

Worsened metrics

Dependency count

1

increased byInfinity%

Number of high supply chain risk alerts

1

increased byInfinity%

Dependency changes

• + Added@ibm/telemetry-js@^1.2.1

• + Added@ibm/telemetry-js@1.9.1(transitive)