@heathmont/moon-components
Advanced tools
Comparing version 2.35.0 to 2.35.1-alpha.0
| { | ||
| "name": "@heathmont/moon-components", | ||
| "sideEffects": false, | ||
| "version": "2.35.0", | ||
| "version": "2.35.1-alpha.0+eab7e4ae", | ||
| "files": [ | ||
@@ -18,5 +18,5 @@ "lib" | ||
| "dependencies": { | ||
| "@heathmont/moon-assets": "^2.35.0", | ||
| "@heathmont/moon-themes": "^2.34.1", | ||
| "@heathmont/moon-utils": "^2.34.1", | ||
| "@heathmont/moon-assets": "^2.35.1-alpha.0+eab7e4ae", | ||
| "@heathmont/moon-themes": "^2.35.1-alpha.0+eab7e4ae", | ||
| "@heathmont/moon-utils": "^2.35.1-alpha.0+eab7e4ae", | ||
| "@reach/dialog": "0.3.0", | ||
@@ -39,3 +39,3 @@ "@types/date-fns": "2.6.0", | ||
| }, | ||
| "gitHead": "dd9af8b79a12ca88783ea075a11bc747b1d36e78" | ||
| "gitHead": "eab7e4ae607b3c02a75174d081a335a884f7e5e2" | ||
| } |
New alerts
License Policy Violation
LicenseThis package is not allowed per your license policy. Review the package's license to ensure compliance.
Found 1 instance in 1 package
Manifest confusion
Supply chain riskThis package has inconsistent metadata. This could be malicious or caused by an error when publishing the package.
Found 1 instance in 1 package
New author
Supply chain riskA new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.
Found 1 instance in 1 package
No v1
QualityPackage is not semver >=1. This means it is not stable and does not support ^ ranges.
Found 1 instance in 1 package
Fixed alerts
License Policy Violation
LicenseThis package is not allowed per your license policy. Review the package's license to ensure compliance.
Found 1 instance in 1 package
Improved metrics
- Total package byte prevSize
1983591
Worsened metrics
- Number of low quality alerts
- increased by100%
2
- Number of medium supply chain risk alerts
- increased byInfinity%
2