@internetarchive/audio-element - npm Package Compare versions

Comparing version 0.0.1-alpha.379 to 0.0.1-alpha.381

package.json

 {
   "name": "@internetarchive/audio-element",
-  "version": "0.0.1-alpha.379+ca1835a",
+  "version": "0.0.1-alpha.381+fb6279b",
   "description": "An Audio Element that wraps the HTML audio tag.",
@@ -9,4 +9,9 @@ "license": "AGPL-3.0-only",
   "types": "index.d.ts",
+  "files": [
+    "lib/**/*",
+    "index.d.ts",
+    "index.js"
+  ],
   "scripts": {
-    "postinstall": "npm run build",
+    "prepare": "npm run build",
     "build": "tsc -p tsconfig.build.json",
@@ -80,3 +85,3 @@ "start": "concurrently \"tsc --watch\" \"es-dev-server --app-index demo/index.html --node-resolve --open --watch\"",
   },
-  "gitHead": "ca1835a0f811b0f2f37987320f9eb91e89e30f3d"
+  "gitHead": "fb6279bd67aa267648c229351eca7ba70d188348"
 }

README.md

@@ -34,3 +34,3 @@ # \<audio-element>
   // set playback rate
-  audioElement.playbackRate = 0.5;
+  audioElement.playbackRate = 0.75;
 
@@ -37,0 +37,0 @@ // set audio sources

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Major refactor

Supply chain risk

Package has recently undergone a major refactor. It may be unstable or indicate significant internal changes. Use caution when updating to versions that include significant changes.

Found 1 instance in 1 package

Manifest confusion

Supply chain risk

This package has inconsistent metadata. This could be malicious or caused by an error when publishing the package.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Install scripts

Supply chain risk

Install scripts are run when the package is installed. The majority of malware in npm is hidden in install scripts.

Found 1 instance in 1 package

Native code

Supply chain risk

Contains native code (e.g., compiled binaries or shared libraries). Including native code can obscure malicious behavior.

Found 9 instances in 1 package

Manifest confusion

Supply chain risk

This package has inconsistent metadata. This could be malicious or caused by an error when publishing the package.

Found 1 instance in 1 package

Improved metrics

Number of high supply chain risk alerts

0

decreased by-100%

Number of medium supply chain risk alerts

2

decreased by-80%

Worsened metrics

Total package byte prevSize

49012

decreased by-79.54%

Number of package files

11

decreased by-62.07%

Lines of code

183

decreased by-58.6%

No dependency changes