@ip-location-db/dbip-city - npm Package Compare versions

Comparing version 2.3.2022120218 to 2.3.2023010218

package.json

 {
   "name": "@ip-location-db/dbip-city",
-  "version": "2.3.2022120218",
+  "version": "2.3.2023010218",
   "description": "Ip to location database",
@@ -5,0 +5,0 @@ "keywords": [

README.md

@@ -83,4 +83,3 @@ # ip-location-db/dbip-city
 You could download and read the license from [ip-to-country-lite](https://db-ip.com/db/download/ip-to-country-lite) or [ip-to-city-lite](https://db-ip.com/db/download/ip-to-city-lite).
-These database are licensed under a [Creative Commons Attribution 4.0 International License](https://creativecommons.org/licenses/by/4.0/),
-so, **you must create attribution to [DB-IP.com](https://db-ip.com/) for using this database**.<br>
+These database are licensed under a [CC BY 4.0](https://creativecommons.org/licenses/by/4.0/), so, **you must create attribution to [DB-IP.com](https://db-ip.com/) for using DB-IP database**.<br>
 In the case of a web application, you must include a link back to DB-IP.com on pages that display or use results from the database. You may do it by pasting the HTML code snippet into your code: `<a href='https://db-ip.com/'>IP Geolocation by DB-IP</a>`.<br>
@@ -102,2 +101,4 @@ If you need better accuracy or no attribution or daily updates, please use the [Commercial Version of db-ip](https://db-ip.com/db/ip-to-country).
 
+You can read [the latest version of GeoLite2 EULA](https://www.maxmind.com/en/geolite2/eula).
+GeoLite2 databse is provided under [CC BY-SA 4.0](https://creativecommons.org/licenses/by-sa/4.0/) by [MaxMind](https://www.maxmind.com), so, **you must create attribution to [MaxMind](https://www.maxmind.com) for using GeoLite2 database**.
 If you need better accuracy, please use the commercial version [GeoIp2](https://www.maxmind.com/en/geoip2-databases).
@@ -104,0 +105,0 @@

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Native code

Supply chain risk

Contains native code (e.g., compiled binaries or shared libraries). Including native code can obscure malicious behavior.

Found 4 instances in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Improved metrics

Number of lines in readme file

123

increased by0.82%

Worsened metrics

Total package byte prevSize

174398309

decreased by-7.73%

Number of medium supply chain risk alerts

5

increased by400%

No dependency changes