@grammar/xml - npm Package Compare versions

Comparing version 0.5.1 to 0.6.0

package.json

 {
   "name": "@grammar/xml",
-  "version": "0.5.1",
+  "version": "0.6.0",
   "description": "XML 1.1 grammar.",
@@ -16,4 +16,3 @@ "keywords": [
   "files": [
-    "modules/grammar-xml.*",
-    "scripts/**/*"
+    "modules/grammar-xml.*"
   ],
@@ -24,6 +23,6 @@ "engines": {
   "dependencies": {
-    "@spellu/engine": "^0.5.1"
+    "@spellu/engine": "^0.6.0"
   },
   "scripts": {
-    "postinstall": "node scripts/postinstall.js",
+    "postinstall": "yarn run esm-setup link --force",
     "build": "yarn run esmc"
@@ -35,3 +34,3 @@ },
   },
-  "gitHead": "fe54ffd11f1df40e3a61459f316a5c674db8c340"
+  "gitHead": "b3dba541f34bc55ca364fed4a512c1be7aaeb78f"
 }

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Install scripts

Supply chain risk

Install scripts are run when the package is installed. The majority of malware in npm is hidden in install scripts.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Install scripts

Supply chain risk

Install scripts are run when the package is installed. The majority of malware in npm is hidden in install scripts.

Found 1 instance in 1 package

Dynamic require

Supply chain risk

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

Found 1 instance in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

Improved metrics

Number of low supply chain risk alerts

1

decreased by-66.67%

Worsened metrics

Total package byte prevSize

28912

decreased by-6.34%

Number of package files

6

decreased by-14.29%

Lines of code

383

decreased by-12.36%

Dependency changes

• + Added@spellu/engine@0.6.5(transitive)

• - Removed@spellu/engine@0.5.1(transitive)

• Updated@spellu/engine@^0.6.0