@expo/package-manager - npm Package Compare versions

Comparing version 1.7.2-canary-20250114-804e26d to 1.8.0-canary-20250122-166c2cb

package.json

 {
   "name": "@expo/package-manager",
-  "version": "1.7.2-canary-20250114-804e26d",
+  "version": "1.8.0-canary-20250122-166c2cb",
   "description": "A library for installing and finding packages in a project",
@@ -40,3 +40,3 @@ "main": "build/index.js",
   "dependencies": {
-    "@expo/json-file": "9.0.2-canary-20250114-804e26d",
+    "@expo/json-file": "9.0.2-canary-20250122-166c2cb",
     "@expo/spawn-async": "^1.7.2",
@@ -59,8 +59,7 @@ "ansi-regex": "^5.0.0",
     "@types/split": "^1.0.0",
-    "expo-module-scripts": "4.0.4-canary-20250114-804e26d"
+    "expo-module-scripts": "4.0.4-canary-20250122-166c2cb"
   },
   "publishConfig": {
     "access": "public"
-  },
-  "gitHead": "804e26d8545f2b890dfa80eeb8122036f38d4d0c"
+  }
 }

New alerts

Unstable ownership

Supply chain risk

A new collaborator has begun publishing package versions. Package stability and security risk may be elevated.

Found 1 instance in 1 package

New author

Supply chain risk

A new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.

Found 1 instance in 1 package

Worsened metrics

Total package byte prevSize

93167

decreased by-0.06%

Number of high supply chain risk alerts

1

increased byInfinity%

Number of medium supply chain risk alerts

3

increased by50%

Dependency changes

• + Added@expo/json-file@9.0.2-canary-20250122-166c2cb(transitive)

• - Removed@expo/json-file@9.0.2-canary-20250114-804e26d(transitive)

• Updated@expo/json-file@9.0.2-canary-20250122-166c2cb