@gasket/plugin-metadata - npm Package Compare versions

Comparing version 5.3.1 to 5.6.0

package.json

 {
   "name": "@gasket/plugin-metadata",
-  "version": "5.3.1",
+  "version": "5.6.0",
   "description": "Adds metadata to gasket lifecycles",
@@ -39,3 +39,3 @@ "main": "lib",
   "dependencies": {
-    "@gasket/resolve": "^5.3.1",
+    "@gasket/resolve": "^5.6.0",
     "lodash.clonedeep": "^4.5.0",
@@ -57,3 +57,3 @@ "lodash.isfunction": "^3.0.9",
   },
-  "gitHead": "cd7eb2e22c200cefeb434d2b792812d533c411da"
+  "gitHead": "6b2425dc36136ff561002d1a9aff30ab9f2b8f45"
 }

New alerts

New author

Supply chain risk

A new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.

Found 1 instance in 1 package

Worsened metrics

Number of medium supply chain risk alerts

1

increased byInfinity%

Dependency changes

• Updated@gasket/resolve@^5.6.0