@dfns/lib-vechain - npm Package Compare versions

Comparing version 0.2.3 to 0.2.4

package.json

 {
   "name": "@dfns/lib-vechain",
-  "version": "0.2.3",
+  "version": "0.2.4",
   "dependencies": {
     "@vechain/connex-driver": "2.0.12",
-    "buffer": "6.0.3",
-    "cross-fetch": "3.1.6",
     "elliptic": "6.5.4",
-    "thor-devkit": "2.0.8",
-    "uuid": "9.0.0"
+    "thor-devkit": "2.0.8"
   },
-  "peerDependencies": {
-    "@dfns/sdk": "0.2.3"
-  },
   "main": "./index.js",
   "type": "commonjs"
 }

Fixed alerts

New author

Supply chain risk

A new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.

Found 1 instance in 1 package

Improved metrics

Dependency count

3

decreased by-57.14%

Number of medium supply chain risk alerts

0

decreased by-100%

Worsened metrics

Total package byte prevSize

3288

decreased by-3.69%

Dependency changes

• - Removedbuffer@6.0.3

• - Removedcross-fetch@3.1.6

• - Removeduuid@9.0.0

• - Removed@dfns/sdk@0.2.3(transitive)

• - Removedbase64-js@1.5.1(transitive)

• - Removedbuffer@6.0.3(transitive)

• - Removedcross-fetch@3.1.6(transitive)

• - Removedieee754@1.2.1(transitive)

• - Removednode-fetch@2.7.0(transitive)

• - Removedtr46@0.0.3(transitive)

• - Removeduuid@9.0.0(transitive)

• - Removedwebidl-conversions@3.0.1(transitive)

• - Removedwhatwg-url@5.0.0(transitive)