@hig/icon - npm Package Compare versions

Comparing version 0.1.1 to 0.1.2

package.json

 {
   "name": "@hig/icon",
-  "version": "0.1.1",
+  "version": "0.1.2",
   "description": "HIG Icon component",
@@ -8,2 +8,6 @@ "author": "Autodesk Inc.",
   "homepage": "https://hig.autodesk.com",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/Autodesk/hig.git"
+  },
   "publishConfig": {
@@ -26,3 +30,4 @@ "access": "public"
     "@hig/eslint-config": "^0.1.0",
-    "@hig/scripts": "^0.1.0",
+    "@hig/scripts": "^0.1.1",
+    "@hig/semantic-release-config": "^0.1.0",
     "@hig/styles": "^0.1.1"
@@ -35,3 +40,4 @@ },
     "build": "hig-scripts-build",
-    "lint": "eslint src --color --ext .js,.jsx"
+    "lint": "hig-scripts-lint",
+    "release": "hig-scripts-release"
   },
@@ -41,2 +47,5 @@ "eslintConfig": {
   },
+  "release": {
+    "extends": "@hig/semantic-release-config"
+  },
   "babel": {
@@ -43,0 +52,0 @@ "env": {

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Major refactor

Supply chain risk

Package has recently undergone a major refactor. It may be unstable or indicate significant internal changes. Use caution when updating to versions that include significant changes.

Found 1 instance in 1 package

New author

Supply chain risk

A new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

No repository

Supply chain risk

Package does not have a linked source code repository. Without this field, a package will have no reference to the location of the source code use to generate the package.

Found 1 instance in 1 package

Improved metrics

Number of package files

7

increased by16.67%

Number of low supply chain risk alerts

0

decreased by-100%

Worsened metrics

Total package byte prevSize

11564

decreased by-94.51%

Dev dependency count

5

increased by25%

Lines of code

343

decreased by-76.96%

Number of medium supply chain risk alerts

2

increased byInfinity%

No dependency changes