@hig/avatar - npm Package Compare versions

Comparing version 0.1.1 to 0.1.2

package.json

 {
   "name": "@hig/avatar",
-  "version": "0.1.1",
+  "version": "0.1.2",
   "description": "HIG Avatar",
   "author": "Autodesk Inc.",
   "license": "Apache-2.0",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/Autodesk/hig.git"
+  },
   "publishConfig": {
@@ -27,3 +31,4 @@ "access": "public"
     "@hig/eslint-config": "^0.1.0",
-    "@hig/scripts": "^0.1.0",
+    "@hig/scripts": "^0.1.1",
+    "@hig/semantic-release-config": "^0.1.0",
     "@hig/styles": "^0.1.1"
@@ -33,3 +38,4 @@ },
     "build": "hig-scripts-build",
-    "lint": "eslint src --color --ext .js,.jsx"
+    "lint": "hig-scripts-lint",
+    "release": "hig-scripts-release"
   },
@@ -39,2 +45,5 @@ "eslintConfig": {
   },
+  "release": {
+    "extends": "@hig/semantic-release-config"
+  },
   "babel": {
@@ -41,0 +50,0 @@ "env": {

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

New author

Supply chain risk

A new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

No repository

Supply chain risk

Package does not have a linked source code repository. Without this field, a package will have no reference to the location of the source code use to generate the package.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

34471

increased by1.42%

Number of package files

7

increased by16.67%

Number of low supply chain risk alerts

0

decreased by-100%

Worsened metrics

Dev dependency count

5

increased by25%

Number of medium supply chain risk alerts

1

increased byInfinity%

No dependency changes