@gltf-transform/core - npm Package Compare versions

Comparing version 0.0.6 to 0.0.7

package.json

 {
   "name": "@gltf-transform/core",
-  "version": "0.0.6",
+  "version": "0.0.7",
   "repository": "github:donmccurdy/glTF-Transform",
@@ -20,3 +20,10 @@ "description": "JavaScript and TypeScript utilities for processing glTF 3D models",
   "author": "Don McCurdy <[e-mail]>",
-  "license": "MIT"
+  "license": "MIT",
+  "files": [
+    "dist/",
+    "src/",
+    "README.md",
+    "package.json",
+    "package-lock.json"
+  ]
 }

README.md

@@ -12,3 +12,3 @@ # glTF-Transform-Util
 
-> This module is part of the glTF-Transform project, where you can create PRs and
+> This module is part of the [glTF-Transform project](https://github.com/donmccurdy/glTF-Transform), where you can create PRs and
 issues.
@@ -15,0 +15,0 @@

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 1 instance in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

Improved metrics

Number of low supply chain risk alerts

1

decreased by-75%

Worsened metrics

Total package byte prevSize

143090

decreased by-50.33%

Number of package files

22

decreased by-74.12%

Lines of code

3411

decreased by-1.76%

No dependency changes