@fontsource/source-sans-pro - npm Package Compare versions

Comparing version 4.5.3 to 4.5.4

metadata.json

@@ -9,4 +9,4 @@ {
   "variable": false,
-  "lastModified": "2021-11-10",
-  "version": "v18",
+  "lastModified": "2022-02-23",
+  "version": "v19",
   "category": "sans-serif",
@@ -13,0 +13,0 @@ "source": "https://fonts.google.com/",

package.json

@@ -1,1 +0,1 @@
-{"name":"@fontsource/source-sans-pro","version":"4.5.3","description":"Self-host the Source Sans Pro font in a neatly bundled NPM package.","main":"index.css","publishConfig":{"access":"public"},"keywords":["fontsource","font","font family","google fonts","Source Sans Pro","source-sans-pro"],"author":"Lotus <[e-mail]>","license":"MIT","homepage":"https://github.com/fontsource/fontsource/tree/master/packages/source-sans-pro#readme","repository":{"type":"git","url":"https://github.com/fontsource/fontsource.git","directory":"packages/source-sans-pro"}}
+{"name":"@fontsource/source-sans-pro","version":"4.5.4","description":"Self-host the Source Sans Pro font in a neatly bundled NPM package.","main":"index.css","publishConfig":{"access":"public"},"keywords":["fontsource","font","font family","google fonts","Source Sans Pro","source-sans-pro"],"author":"Lotus <[e-mail]>","license":"MIT","homepage":"https://github.com/fontsource/fontsource/tree/master/packages/source-sans-pro#readme","repository":{"type":"git","url":"https://github.com/fontsource/fontsource.git","directory":"packages/source-sans-pro"}}

README.md

@@ -44,4 +44,4 @@ # Fontsource Source Sans Pro
 
-Font version (provided by source): `v18`.
+Font version (provided by source): `v19`.
 
 Feel free to star and contribute new ideas to this repository that aim to improve the performance of font loading, as well as expanding the existing library we already have. Any suggestions or ideas can be voiced via an [issue](https://github.com/fontsource/fontsource/issues).

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Native code

Supply chain risk

Contains native code (e.g., compiled binaries or shared libraries). Including native code can obscure malicious behavior.

Found 24 instances in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Native code

Supply chain risk

Contains native code (e.g., compiled binaries or shared libraries). Including native code can obscure malicious behavior.

Found 2 instances in 1 package

Worsened metrics

Total package byte prevSize

3015106

decreased by-0.38%

Number of medium supply chain risk alerts

40

increased by122.22%

No dependency changes