@globus/globus-css - npm Package Compare versions

Comparing version 0.4.5 to 0.5.0

CHANGELOG.md

@@ -5,2 +5,13 @@ # Changelog
 
+## [0.5.0](https://github.com/globusonline/globus-css/compare/v0.4.5...v0.5.0) (2022-10-12)
+
+
+### ⚠ BREAKING CHANGES
+
+* removes legacy version packaging system (package is now available on npm) (#192)
+
+### Bug Fixes
+
+* removes legacy version packaging system (package is now available on npm) ([#192](https://github.com/globusonline/globus-css/issues/192)) ([8298eca](https://github.com/globusonline/globus-css/commit/8298eca012a8ae5b439eee1b707c7cad8f635116))
+
 ### [0.4.5](https://github.com/globusonline/globus-css/compare/v0.4.4...v0.4.5) (2022-10-12)
@@ -7,0 +18,0 @@

package.json

 {
   "name": "@globus/globus-css",
-  "version": "0.4.5",
+  "version": "0.5.0",
   "description": "Utility-centric CSS and styled components to give you the building blocks for any Globus web project.",
   "main": "dist/globus-css.js",
+  "files": [
+    "src/**/*",
+    "dist/**/*",
+    "assets/**/*"
+  ],
   "dependencies": {
@@ -71,3 +76,3 @@ "bootstrap": "^4.6.1"
     "lint": "stylelint --quiet src",
-    "prerelease": "webpack --mode=production --output-path=./dist/next && npm run build:svgs -- --prerelease",
+    "prerelease": "webpack --mode=production && npm run build:svgs",
     "release": "standard-version -a"
@@ -82,3 +87,3 @@ },
   "author": "",
-  "license": "ISC"
+  "license": "UNLICENSED"
 }

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Native code

Supply chain risk

Contains native code (e.g., compiled binaries or shared libraries). Including native code can obscure malicious behavior.

Found 7 instances in 1 package

Major refactor

Supply chain risk

Package has recently undergone a major refactor. It may be unstable or indicate significant internal changes. Use caution when updating to versions that include significant changes.

Found 1 instance in 1 package

Misc. License Issues

License

(Experimental) A package's licensing information has fine-grained problems.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Native code

Supply chain risk

Contains native code (e.g., compiled binaries or shared libraries). Including native code can obscure malicious behavior.

Found 44 instances in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 1 instance in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

Improved metrics

Number of low supply chain risk alerts

1

decreased by-80%

Number of medium supply chain risk alerts

12

decreased by-75%

Worsened metrics

Total package byte prevSize

1970614

decreased by-74.16%

Number of package files

396

decreased by-19.84%

Number of medium license alerts

1

increased byInfinity%

Lines of code

1288

decreased by-90.44%

No dependency changes