@evidence-dev/create-new - npm Package Compare versions

Comparing version 1.0.0 to 1.0.1

package.json

@@ -6,3 +6,3 @@ {
 	"author": "evidence.dev",
-	"version": "1.0.0",
+	"version": "1.0.1",
 	"bin": "./bin.js",
@@ -25,2 +25,7 @@ "devDependencies": {
 	},
+	"files": [
+		"dist",
+		"bin.js"
+	],
+	"type": "module",
 	"scripts": {
@@ -31,10 +36,4 @@ "dev": "rollup -cw",
 		"format": "prettier --write . --config ../../.prettierrc --ignore-path .gitignore",
-		"check-format": "prettier --check . --config ../../.prettierrc --ignore-path .gitignore",
-		"prepublishOnly": "npm run build"
-	},
-	"files": [
-		"dist",
-		"bin.js"
-	],
-	"type": "module"
+		"check-format": "prettier --check . --config ../../.prettierrc --ignore-path .gitignore"
+	}
 }

New alerts

Major refactor

Supply chain risk

Package has recently undergone a major refactor. It may be unstable or indicate significant internal changes. Use caution when updating to versions that include significant changes.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 4 instances in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

Fixed alerts

Major refactor

Supply chain risk

Package has recently undergone a major refactor. It may be unstable or indicate significant internal changes. Use caution when updating to versions that include significant changes.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

846412

increased by22.05%

Lines of code

4936

increased by3126.14%

Worsened metrics

Number of low supply chain risk alerts

8

increased by700%

No dependency changes