@endo/promise-kit - npm Package Compare versions

Comparing version 0.2.53 to 0.2.54

package.json

 {
   "name": "@endo/promise-kit",
-  "version": "0.2.53",
+  "version": "0.2.54",
   "description": "Helper for making promises",
@@ -40,9 +40,9 @@ "keywords": [
   "dependencies": {
-    "ses": "^0.18.1"
+    "ses": "^0.18.2"
   },
   "devDependencies": {
-    "@endo/eslint-config": "^0.5.2",
-    "@endo/ses-ava": "^0.2.37",
+    "@endo/eslint-config": "^0.5.3",
+    "@endo/ses-ava": "^0.2.38",
     "@types/node": ">=14.0",
-    "ava": "^5.1.0",
+    "ava": "^5.2.0",
     "babel-eslint": "^10.0.3",
@@ -54,6 +54,6 @@ "c8": "^7.7.3",
     "eslint-plugin-eslint-comments": "^3.1.2",
-    "eslint-plugin-import": "^2.26.0",
+    "eslint-plugin-import": "^2.27.5",
     "eslint-plugin-prettier": "^3.4.1",
     "prettier": "^2.8.0",
-    "typescript": "~4.8.4"
+    "typescript": "~4.9.5"
   },
@@ -89,3 +89,3 @@ "files": [
   },
-  "gitHead": "ab8d64ae6fc9c628a2d1c02d16bf9ef249f5c8dc"
+  "gitHead": "0053227a37ee76ee8a3dce6059dd55140ed0ce6d"
 }

SECURITY.md

@@ -13,3 +13,3 @@ # Security Policy
 
-* Reporting the issue to the [Agoric HackerOne vulnerability rewards program](hackerone.com/agoric). 
+* Reporting the issue to the [Agoric HackerOne vulnerability rewards program](https://hackerone.com/agoric). 
 
@@ -16,0 +16,0 @@ * Sending an email to security at (@) agoric.com., encrypted or unencrypted. To encrypt, please use  @Warner’s personal GPG key  [A476E2E6 11880C98 5B3C3A39 0386E81B 11CAA07A](http://www.lothar.com/warner-gpg.html)  .

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

New author

Supply chain risk

A new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

30125

increased by0.03%

Worsened metrics

Number of medium supply chain risk alerts

1

increased byInfinity%

Dependency changes

• Updatedses@^0.18.2