@code.gov/code-gov-style
Advanced tools
@code.gov/code-gov-style - npm Package Compare versions
Comparing version 2.0.3 to 2.0.4
| { | ||
| "name": "@code.gov/code-gov-style", | ||
| "version": "2.0.3", | ||
| "version": "2.0.4", | ||
| "description": "Style for code.gov including buttons, banners, and cards. Inspired by and somewhat based on USWDS.", | ||
@@ -37,17 +37,17 @@ "main": "index.js", | ||
| "dependencies": { | ||
| "@babel/polyfill": "^7.0.0", | ||
| "@babel/polyfill": "^7.8.7", | ||
| "@code.gov/code-gov-font": "0.10.0", | ||
| "@webcomponents/custom-elements": "^1.2.4", | ||
| "custom-event-polyfill": "^1.0.6", | ||
| "license-checker": "^25.0.1", | ||
| "license-checker": "github:davglass/license-checker#pull/234/head", | ||
| "prismjs": "^1.15.0" | ||
| }, | ||
| "devDependencies": { | ||
| "@babel/cli": "^7.4.4", | ||
| "@babel/core": "^7.4.4", | ||
| "@babel/plugin-transform-arrow-functions": "^7.0.0", | ||
| "@babel/preset-env": "^7.4.4", | ||
| "@babel/preset-react": "^7.0.0", | ||
| "@babel/cli": "^7.8.4", | ||
| "@babel/core": "^7.9.0", | ||
| "@babel/plugin-transform-arrow-functions": "^7.8.3", | ||
| "@babel/preset-env": "^7.9.0", | ||
| "@babel/preset-react": "^7.9.4", | ||
| "glyphhanger": "^3.0.3", | ||
| "pa11y-ci": "^2.1.1", | ||
| "pa11y-ci": "^2.3.0", | ||
| "stylelint": "^10.0.1", | ||
@@ -54,0 +54,0 @@ "stylelint-config-standard": "^18.3.0" |
New alerts
License Policy Violation
LicenseThis package is not allowed per your license policy. Review the package's license to ensure compliance.
Found 1 instance in 1 package
GitHub dependency
Supply chain riskContains a dependency which resolves to a GitHub URL. Dependencies fetched from GitHub specifiers are not immutable can be used to inject untrusted code or reduce the likelihood of a reproducible install.
Found 1 instance in 1 package
New author
Supply chain riskA new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.
Found 1 instance in 1 package
Fixed alerts
License Policy Violation
LicenseThis package is not allowed per your license policy. Review the package's license to ensure compliance.
Found 1 instance in 1 package
Improved metrics
- Total package byte prevSize
1503568
Worsened metrics
- Number of high supply chain risk alerts
- increased byInfinity%
1
- Number of medium supply chain risk alerts
- increased by5%
21
Dependency changes
- Removedabbrev@1.1.1(transitive)
- Removedansi-styles@3.2.1(transitive)
- Removedarray-find-index@1.0.2(transitive)
- Removedasap@2.0.6(transitive)
- Removedbalanced-match@1.0.2(transitive)
- Removedbrace-expansion@1.1.11(transitive)
- Removedchalk@2.4.2(transitive)
- Removedcolor-convert@1.9.3(transitive)
- Removedcolor-name@1.1.3(transitive)
- Removedconcat-map@0.0.1(transitive)
- Removeddebug@3.2.7(transitive)
- Removeddebuglog@1.0.1(transitive)
- Removeddezalgo@1.0.4(transitive)
- Removedescape-string-regexp@1.0.5(transitive)
- Removedfs.realpath@1.0.0(transitive)
- Removedfunction-bind@1.1.2(transitive)
- Removedglob@7.2.3(transitive)
- Removedgraceful-fs@4.2.11(transitive)
- Removedhas-flag@3.0.0(transitive)
- Removedhasown@2.0.2(transitive)
- Removedhosted-git-info@2.8.9(transitive)
- Removedinflight@1.0.6(transitive)
- Removedinherits@2.0.4(transitive)
- Removedis-core-module@2.15.1(transitive)
- Removedjson-parse-even-better-errors@2.3.1(transitive)
- Removedlicense-checker@25.0.1(transitive)
- Removedminimatch@3.1.2(transitive)
- Removedminimist@1.2.8(transitive)
- Removedmkdirp@0.5.6(transitive)
- Removedms@2.1.3(transitive)
- Removednopt@4.0.3(transitive)
- Removednormalize-package-data@2.5.0(transitive)
- Removednpm-normalize-package-bin@1.0.1(transitive)
- Removedonce@1.4.0(transitive)
- Removedos-homedir@1.0.2(transitive)
- Removedos-tmpdir@1.0.2(transitive)
- Removedosenv@0.1.5(transitive)
- Removedpath-is-absolute@1.0.1(transitive)
- Removedpath-parse@1.0.7(transitive)
- Removedread-installed@4.0.3(transitive)
- Removedread-package-json@2.1.2(transitive)
- Removedreaddir-scoped-modules@1.1.0(transitive)
- Removedresolve@1.22.8(transitive)
- Removedsemver@5.7.2(transitive)
- Removedslide@1.1.6(transitive)
- Removedspdx-compare@1.0.0(transitive)
- Removedspdx-correct@3.2.0(transitive)
- Removedspdx-exceptions@2.5.0(transitive)
- Removedspdx-expression-parse@3.0.1(transitive)
- Removedspdx-license-ids@3.0.20(transitive)
- Removedspdx-ranges@2.1.1(transitive)
- Removedspdx-satisfies@4.0.1(transitive)
- Removedsupports-color@5.5.0(transitive)
- Removedsupports-preserve-symlinks-flag@1.0.0(transitive)
- Removedtreeify@1.1.0(transitive)
- Removedutil-extend@1.0.3(transitive)
- Removedvalidate-npm-package-license@3.0.4(transitive)
- Removedwrappy@1.0.2(transitive)
Updated@babel/polyfill@^7.8.7
Updatedlicense-checker@github:davglass/license-checker#pull/234/head