@financial-times/x-engine
Advanced tools
@financial-times/x-engine - npm Package Compare versions
Comparing version 1.0.0-3 to 1.0.0-4
| { | ||
| "name": "@financial-times/x-engine", | ||
| "version": "v1.0.0-3", | ||
| "version": "v1.0.0-4", | ||
| "description": "A consolidation library to render x- components with any compatible runtime.", | ||
@@ -19,3 +19,3 @@ "main": "src/server.js", | ||
| }, | ||
| "gitHead": "dc1fb3601a8408f352531f550ccf61580089caa7" | ||
| "gitHead": "d5b32736a311f731d27f284dd5dc465b080b0f38" | ||
| } |
New alerts
License Policy Violation
LicenseThis package is not allowed per your license policy. Review the package's license to ensure compliance.
Found 1 instance in 1 package
Manifest confusion
Supply chain riskThis package has inconsistent metadata. This could be malicious or caused by an error when publishing the package.
Found 1 instance in 1 package
Fixed alerts
License Policy Violation
LicenseThis package is not allowed per your license policy. Review the package's license to ensure compliance.
Found 1 instance in 1 package
Manifest confusion
Supply chain riskThis package has inconsistent metadata. This could be malicious or caused by an error when publishing the package.
Found 1 instance in 1 package
New author
Supply chain riskA new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.
Found 1 instance in 1 package
Improved metrics
- Number of medium supply chain risk alerts
- decreased by-50%
1