@invisionag/iris-tools - npm Package Compare versions

Comparing version 0.1.0 to 0.1.2

package.json

 {
   "name": "@invisionag/iris-tools",
-  "version": "0.1.0",
+  "version": "0.1.2",
   "main": "tools.scss",
   "license": "MIT",
+  "repository": "[e-mail]:ivx/iris.git",
   "dependencies": {
-    "@invisionag/iris-settings": "^0.1.0",
-    "@invisionag/iris-colors": "^0.1.0"
+    "@invisionag/iris-settings": "^0.1.2",
+    "@invisionag/iris-colors": "^0.1.2"
   }
 }

New alerts

New author

Supply chain risk

A new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.

Found 1 instance in 1 package

Fixed alerts

No repository

Supply chain risk

Package does not have a linked source code repository. Without this field, a package will have no reference to the location of the source code use to generate the package.

Found 1 instance in 1 package

Worsened metrics

Total package byte prevSize

992

decreased by-87%

Number of package files

4

decreased by-20%

Number of medium supply chain risk alerts

2

increased by100%

Dependency changes

• Updated@invisionag/iris-colors@^0.1.2

• Updated@invisionag/iris-settings@^0.1.2