New Case Study:See how Anthropic automated 95% of dependency reviews with Socket.Learn More →
@citation-js/cli
Advanced tools
@citation-js/cli - npm Package Compare versions
Comparing version 0.4.0-rc.0 to 0.4.0-rc.1
| { | ||
| "name": "@citation-js/cli", | ||
| "version": "0.4.0-rc.0", | ||
| "version": "0.4.0-rc.1", | ||
| "description": "CLI for Citation.js", | ||
@@ -11,3 +11,3 @@ "keywords": [ | ||
| "license": "MIT", | ||
| "main": "lib/index.js", | ||
| "main": "bin/cmd.js", | ||
| "bin": { | ||
@@ -30,3 +30,3 @@ "citation-js": "bin/cmd.js" | ||
| "files": [ | ||
| "lib" | ||
| "bin" | ||
| ], | ||
@@ -37,12 +37,12 @@ "scripts": { | ||
| "dependencies": { | ||
| "@citation-js/core": "^0.4.0-rc.0", | ||
| "@citation-js/plugin-bibjson": "^0.4.0-rc.0", | ||
| "@citation-js/plugin-bibtex": "^0.4.0-rc.0", | ||
| "@citation-js/plugin-csl": "^0.4.0-rc.0", | ||
| "@citation-js/plugin-doi": "^0.4.0-rc.0", | ||
| "@citation-js/plugin-ris": "^0.4.0-rc.0", | ||
| "@citation-js/plugin-wikidata": "^0.4.0-rc.0", | ||
| "@citation-js/core": "^0.4.0-rc.1", | ||
| "@citation-js/plugin-bibjson": "^0.4.0-rc.1", | ||
| "@citation-js/plugin-bibtex": "^0.4.0-rc.1", | ||
| "@citation-js/plugin-csl": "^0.4.0-rc.1", | ||
| "@citation-js/plugin-doi": "^0.4.0-rc.1", | ||
| "@citation-js/plugin-ris": "^0.4.0-rc.1", | ||
| "@citation-js/plugin-wikidata": "^0.4.0-rc.1", | ||
| "commander": "^2.17.1" | ||
| }, | ||
| "gitHead": "113776d8b373284f4484c33bfaf13bb78de146f0" | ||
| "gitHead": "09ff47215f95d87cbf58062ca19912dcd8d2eb77" | ||
| } |
@@ -6,3 +6,4 @@ # @citation-js/cli | ||
| [](https://npmcharts.com/compare/@citation-js%2Fcli?minimal=true) | ||
|  | ||
|  | ||
|  | ||
| --- | ||
@@ -9,0 +10,0 @@ |
New alerts
Dynamic require
Supply chain riskDynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.
Found 1 instance in 1 package
Filesystem access
Supply chain riskAccesses the file system, and could potentially read sensitive data.
Found 1 instance in 1 package
Fixed alerts
Empty package
Supply chain riskPackage does not contain any code. It may be removed, is name squatting, or the result of a faulty package publish.
Found 1 instance in 1 package
Improved metrics
- Total package byte prevSize
11063
90.45%- Number of package files
5
66.67%- Lines of code
100
Infinity%- Number of lines in readme file
74
1.37%- Number of medium supply chain risk alerts
0
-100%Worsened metrics
- Number of low supply chain risk alerts
3
200%