@girder/fontello - npm Package Compare versions

Comparing version 3.1.9 to 3.1.10

Gruntfile.js

@@ -9,3 +9,3 @@ module.exports = function (grunt) {
                 options: {
-  		    host: "https://fontello.com",
+                    host: 'https://fontello.com',
                     config: 'fontello.config.json',
@@ -12,0 +12,0 @@ fonts: 'dist/fonts',

package.json

 {
   "name": "@girder/fontello",
-  "version": "3.1.9",
+  "version": "3.1.10",
   "description": "Built Fontello files for use in Girder.",
@@ -16,4 +16,3 @@ "license": "Apache-2.0",
     "build": "grunt",
-    "prepublishOnly": "$npm_execpath install --no-save npm-force-resolutions && $npm_execpath install && $npm_execpath run build",
-    "preinstall": "npm-force-resolutions"
+    "prepublishOnly": "$npm_execpath install && $npm_execpath run build"
   },
@@ -25,5 +24,2 @@ "devDependencies": {
   },
-  "resolutions": {
-    "getobject": "^1.0.0"
-  },
   "keywords": [
@@ -30,0 +26,0 @@ "fontello",

Fixed alerts

Install scripts

Supply chain risk

Install scripts are run when the package is installed. The majority of malware in npm is hidden in install scripts.

Found 1 instance in 1 package

New author

Supply chain risk

A new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.

Found 1 instance in 1 package

Improved metrics

Number of high supply chain risk alerts

0

decreased by-100%

Number of medium supply chain risk alerts

0

decreased by-100%

Worsened metrics

Total package byte prevSize

645809

decreased by-0.02%

No dependency changes