@gmb/bitmark-parser-generator - npm Package Compare versions

Comparing version 5.9.1 to 5.10.0

LICENSE

@@ -1,3 +0,7 @@
-Proprietary
+ISC License
 
-© 2023-25 Get More Brain Ltd
+Copyright © 2023-26 Get More Brain Ltd
+
+Permission to use, copy, modify, and/or distribute this software for any purpose with or without fee is hereby granted, provided that the above copyright notice and this permission notice appear in all copies.
+
+THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.

package.json

 {
   "name": "@gmb/bitmark-parser-generator",
-  "version": "5.9.1",
+  "version": "5.10.0",
   "description": "A bitmark parser and generator using Peggy.js",
@@ -102,2 +102,3 @@ "author": "Get More Brain Ltd",
     "regenerate-bitmark-test-json": "tsx ./test/custom/dev/devRegenerateBitmarkTestJson.ts",
+    "regenerate-bitmark-test-bitmark": "tsx ./test/custom/dev/devRegenerateBitmarkTestBitmark.ts",
     "prepublishOnly": "npm run clean && npm run build && npm run test",
@@ -104,0 +105,0 @@ "clean": "tsx scripts/clean.ts",

New alerts

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 2 instances in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

Fixed alerts

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 2 instances in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

Unidentified License

License

Something that seems like a license was found, but its contents could not be matched with a known license.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

20294406

0.02%

Number of low license alerts

0

-100%

License quality

100

25%

Number of low supply chain risk alerts

54

-1.82%

Worsened metrics

Lines of code

213247

0

No dependency changes