@code.gov/code-gov-style - npm Package Compare versions

Comparing version 0.0.1 to 1.0.0

package.json

 {
   "name": "@code.gov/code-gov-style",
-  "version": "0.0.1",
+  "version": "1.0.0",
   "description": "Style for code.gov including buttons, banners, and cards. Inspired by and somewhat based on USWDS.",
   "main": "index.js",
   "scripts": {
+    "serve": "bundle exec jekyll serve",
+    "update-font": "cd bash_scripts && bash update-font.sh"
   },
@@ -24,3 +26,6 @@ "repository": {
   },
-  "homepage": "https://github.com/GSA/code-gov-style#readme"
+  "homepage": "https://github.com/GSA/code-gov-style#readme",
+  "dependencies": {
+    "@code.gov/code-gov-font": "^0.5.0"
+  }
 }

README.md

 # code-gov-style
 Style for code.gov including buttons, banners, and cards. Inspired by and somewhat based on USWDS.
 
+### link
+https://gsa.github.io/code-gov-style/
+
 ### Purpose
@@ -8,3 +11,8 @@ As our code base expands, maintaining and remembering all the CSS class names has become difficult.
 
+### Legal
+We use the fa-search icon from Font Awesome.  Font Awesome released their fa-search icon under this license https://creativecommons.org/licenses/by/4.0/
+
+We copy-pasted some code from the `hamburgers` library to `_hamburgers.scss`.  Hamburgers was created by Jonsuh.  Hamburgers is released under the MIT License and can be found here https://github.com/jonsuh/hamburgers/blob/master/LICENSE as well as in the licenses folder in this repository.
+
 ### Contact
 Contact Daniel J. Dufour at [e-mail] if you have any questions

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Native code

Supply chain risk

Contains native code (e.g., compiled binaries or shared libraries). Including native code can obscure malicious behavior.

Found 4 instances in 1 package

Mixed license

License

(Experimental) Package contains multiple licenses.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Empty package

Supply chain risk

Package does not contain any code. It may be removed, is name squatting, or the result of a faulty package publish.

Found 1 instance in 1 package

No v1

Quality

Package is not semver >=1. This means it is not stable and does not support ^ ranges.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

357865

increased by56.12%

Number of package files

73

increased by102.78%

Lines of code

11

increased byInfinity%

Number of low quality alerts

0

decreased by-100%

Number of lines in readme file

18

increased by80%

Worsened metrics

Dependency count

1

increased byInfinity%

Number of low license alerts

1

increased byInfinity%

Number of medium supply chain risk alerts

4

increased by300%

Dependency changes

• + [e-mail]/code-gov-font@^0.5.0

• + [e-mail]/code-gov-font@0.5.0(transitive)