@datadog/native-metrics - npm Package Compare versions

Comparing version 2.0.0 to 3.0.0

package.json

 {
   "name": "@datadog/native-metrics",
-  "version": "2.0.0",
+  "version": "3.0.0",
   "description": "Native metrics collector for libuv and v8",
@@ -15,3 +15,3 @@ "main": "index.js",
     "lint": "node scripts/check_licenses.js && eslint .",
-    "test": "mocha 'test/**/*.spec.js'"
+    "test": "mocha -n expose-gc 'test/**/*.spec.js' && node test/main"
   },
@@ -24,3 +24,3 @@ "keywords": [
   "engines": {
-    "node": ">=12"
+    "node": ">=16"
   },
@@ -39,5 +39,4 @@ "dependencies": {
     "eslint-plugin-standard": "^5.0.0",
-    "mocha": "^9.0.3",
-    "nan": "^2.17.0"
+    "mocha": "^9.0.3"
   }
 }

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Native code

Supply chain risk

Contains native code (e.g., compiled binaries or shared libraries). Including native code can obscure malicious behavior.

Found 4 instances in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Native code

Supply chain risk

Contains native code (e.g., compiled binaries or shared libraries). Including native code can obscure malicious behavior.

Found 3 instances in 1 package

Improved metrics

Total package byte prevSize

1058317

increased by17.75%

Dev dependency count

8

decreased by-11.11%

Number of package files

15

increased by7.14%

Worsened metrics

Number of medium supply chain risk alerts

10

increased by11.11%

No dependency changes