@elastic.io/jsonata-moment - npm Package Compare versions

Comparing version 1.1.4 to 1.1.5-dev

package.json

 {
   "name": "@elastic.io/jsonata-moment",
-  "version": "1.1.4",
+  "version": "1.1.5-dev",
   "description": "Moment support for JSONata",
@@ -11,2 +11,3 @@ "main": "dist/jsonata-moment.js",
   "scripts": {
+    "audit": "better-npm-audit audit --level high --production",
     "test": "npm run build && mocha spec --recursive",
@@ -27,15 +28,16 @@ "prepublishOnly": "npm run build",
   "devDependencies": {
-    "babel-cli": "^6.26.0",
-    "babel-plugin-transform-runtime": "^6.23.0",
-    "babel-preset-env": "^1.6.1",
-    "babel-runtime": "^6.26.0",
-    "browserify": "^16.1.0",
-    "chai": "^4.1.2",
-    "mocha": "^3.5.3",
+    "babel-cli": "6.26.0",
+    "babel-plugin-transform-runtime": "6.23.0",
+    "babel-preset-env": "1.6.1",
+    "babel-runtime": "6.26.0",
+    "browserify": "16.1.0",
+    "chai": "4.1.2",
+    "mocha": "3.5.3",
     "moment": "2.24.0",
-    "uglify-es": "^3.3.10"
+    "uglify-es": "3.3.10",
+    "better-npm-audit": "3.7.3"
   },
   "dependencies": {
-    "jsonata": "1.7.0"
+    "jsonata": "1.8.6"
   }
 }

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

New author

Supply chain risk

A new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.

Found 1 instance in 1 package

No v1

Quality

Package is not semver >=1. This means it is not stable and does not support ^ ranges.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

New author

Supply chain risk

A new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

445582

increased by3.27%

Lines of code

10877

increased by2.96%

Worsened metrics

Dev dependency count

10

increased by11.11%

Number of low quality alerts

2

increased by100%

Dependency changes

• + Addedjsonata@1.8.6(transitive)

• - Removedjsonata@1.7.0(transitive)

• Updatedjsonata@1.8.6