@dxos/codec-protobuf - npm Package Compare versions

Comparing version 1.1.0-beta.0 to 1.1.0-beta.1

dist/codec-protobuf.js

@@ -198,3 +198,3 @@ "use strict";
     if (!type) {
-      throw new Error("Unknown type: ".concat(typeUrl));
+      throw new Error(`Unknown type: ${typeUrl}`);
     }
@@ -267,3 +267,3 @@
       if (options.strict) {
-        throw new Error("Unknown type: ".concat(typeUrl));
+        throw new Error(`Unknown type: ${typeUrl}`);
       } else {
@@ -299,3 +299,3 @@ return undefined;
       if (options.strict) {
-        throw new Error("Unknown type: ".concat(typeUrl));
+        throw new Error(`Unknown type: ${typeUrl}`);
       } else {
@@ -330,3 +330,3 @@ return object;
             if (options.strict) {
-              throw new Error("Unknown type: ".concat(typeUrl));
+              throw new Error(`Unknown type: ${typeUrl}`);
             }
@@ -333,0 +333,0 @@

package.json

 {
   "name": "@dxos/codec-protobuf",
-  "version": "1.1.0-beta.0",
+  "version": "v1.1.0-beta.1",
   "description": "Value encoding for protobuf.",
@@ -37,3 +37,3 @@ "homepage": "https://github.com/dxos/codec-protobuf#readme",
     "lodash.merge": "^4.6.2",
-    "protobufjs": "https://github.com/wirelineio/protobuf.js#wireline-dist",
+    "protobufjs": "https://github.com/protobufjs/protobuf.js",
     "source-map-support": "^0.5.12"
@@ -40,0 +40,0 @@ },

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

HTTP dependency

Supply chain risk

Contains a dependency which resolves to a remote HTTP URL which could be used to inject untrusted code and reduce overall package reliability.

Found 1 instance in 1 package

Manifest confusion

Supply chain risk

This package has inconsistent metadata. This could be malicious or caused by an error when publishing the package.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

HTTP dependency

Supply chain risk

Contains a dependency which resolves to a remote HTTP URL which could be used to inject untrusted code and reduce overall package reliability.

Found 1 instance in 1 package

Major refactor

Supply chain risk

Package has recently undergone a major refactor. It may be unstable or indicate significant internal changes. Use caution when updating to versions that include significant changes.

Found 1 instance in 1 package

Manifest confusion

Supply chain risk

This package has inconsistent metadata. This could be malicious or caused by an error when publishing the package.

Found 1 instance in 1 package

New author

Supply chain risk

A new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

62097

Number of medium supply chain risk alerts

1

decreased by-66.67%

Dependency changes

• Updatedprotobufjs@https://github.com/protobufjs/protobuf.js