@commercetools-uikit/spacings-inset-squish
Advanced tools
@commercetools-uikit/spacings-inset-squish - npm Package Compare versions
Comparing version 10.11.1-canary.68 to 10.13.0
| { | ||
| "name": "@commercetools-uikit/spacings-inset-squish", | ||
| "version": "10.11.1-canary.68+d78d8745", | ||
| "version": "10.13.0", | ||
| "description": "", | ||
@@ -12,2 +12,3 @@ "main": "dist/inset-squish.cjs.js", | ||
| "scripts": { | ||
| "prepare": "../../../../scripts/version.js replace", | ||
| "prebuild": "rimraf dist", | ||
@@ -22,4 +23,4 @@ "build": "cross-env NODE_ENV=production rollup -c ../../../../rollup.config.js -i ./index.js" | ||
| "dependencies": { | ||
| "@commercetools-uikit/design-system": "10.11.1-canary.68+d78d8745", | ||
| "@commercetools-uikit/utils": "10.11.1-canary.68+d78d8745", | ||
| "@commercetools-uikit/design-system": "10.13.0", | ||
| "@commercetools-uikit/utils": "10.13.0", | ||
| "@emotion/core": "10.0.22", | ||
@@ -31,3 +32,3 @@ "prop-types": "15.7.2" | ||
| }, | ||
| "gitHead": "d78d874568cadf294f0cbd38c300456f47b34653" | ||
| "gitHead": "98037b3980967bfa6dcdc97d2bcbd44e275429a7" | ||
| } |
New alerts
License Policy Violation
LicenseThis package is not allowed per your license policy. Review the package's license to ensure compliance.
Found 1 instance in 1 package
Environment variable access
Supply chain riskPackage accesses environment variables, which may be a sign of credential stuffing or data theft.
Found 1 instance in 1 package
Fixed alerts
License Policy Violation
LicenseThis package is not allowed per your license policy. Review the package's license to ensure compliance.
Found 1 instance in 1 package
Empty package
Supply chain riskPackage does not contain any code. It may be removed, is name squatting, or the result of a faulty package publish.
Found 1 instance in 1 package
Manifest confusion
Supply chain riskThis package has inconsistent metadata. This could be malicious or caused by an error when publishing the package.
Found 1 instance in 1 package
New author
Supply chain riskA new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.
Found 1 instance in 1 package
No v1
QualityPackage is not semver >=1. This means it is not stable and does not support ^ ranges.
Found 1 instance in 1 package
Improved metrics
- Total package byte prevSize
- increased by174.97%
5219
- Number of package files
- increased by100%
4
- Lines of code
- increased byInfinity%
97
- Number of low quality alerts
- decreased by-50%
1
- Number of medium supply chain risk alerts
- decreased by-100%
0
Worsened metrics
- Number of low supply chain risk alerts
- increased by200%
3
- Published versions last two months
- decreased by-4.17%
23
Dependency changes
+ Added@commercetools-uikit/design-system@10.13.0(transitive)
+ Added@commercetools-uikit/utils@10.13.0(transitive)
+ Added@emotion/is-prop-valid@0.8.5(transitive)
+ Added@emotion/memoize@0.7.3(transitive)
+ Addedwarning@4.0.3(transitive)