@keepkey/device-protocol - npm Package Compare versions

Comparing version 6.0.2 to 6.1.0

package.json

 {
   "name": "@keepkey/device-protocol",
-  "version": "6.0.2",
+  "version": "6.1.0",
   "publishConfig": {
@@ -9,5 +9,5 @@ "access": "public"
   "scripts": {
-    "build": "yarn build:js && yarn build:json",
-    "build:js": "protoc --plugin=protoc-gen-ts=./node_modules/.bin/protoc-gen-ts --js_out=import_style=commonjs,binary:./lib --ts_out=./lib exchange.proto types.proto messages.proto messages-eos.proto",
-    "build:json": "pbjs --keep-case -t json ./types.proto ./messages.proto ./messages-eos.proto ./exchange.proto > ./lib/proto.json",
+    "build": "npm run build:js && npm run build:json",
+    "build:js": "protoc --plugin=protoc-gen-ts=./node_modules/.bin/protoc-gen-ts --js_out=import_style=commonjs,binary:./lib --ts_out=./lib exchange.proto types.proto messages.proto messages-eos.proto messages-nano.proto",
+    "build:json": "pbjs --keep-case -t json ./types.proto ./messages.proto ./messages-eos.proto ./messages-nano.proto ./exchange.proto > ./lib/proto.json",
     "test": "echo \"Error: no test specified\" && exit 1"
@@ -26,4 +26,5 @@ },
   "dependencies": {
-    "google-protobuf": "^3.7.0-rc.2"
+    "google-protobuf": "^3.7.0-rc.2",
+    "pbjs": "^0.0.5"
   }
 }

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Empty package

Supply chain risk

Package does not contain any code. It may be removed, is name squatting, or the result of a faulty package publish.

Found 1 instance in 1 package

Major refactor

Supply chain risk

Package has recently undergone a major refactor. It may be unstable or indicate significant internal changes. Use caution when updating to versions that include significant changes.

Found 1 instance in 1 package

New author

Supply chain risk

A new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Uses eval

Supply chain risk

Package uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Found 1 instance in 1 package

Improved metrics

Number of lines in readme file

5

increased by25%

Number of medium supply chain risk alerts

3

decreased by-25%

Worsened metrics

Total package byte prevSize

5842

decreased by-99.5%

Dependency count

2

increased by100%

Number of package files

5

decreased by-61.54%

Lines of code

0

decreased by-100%

Dependency changes

• + Addedpbjs@^0.0.5

• + Addedbytebuffer@5.0.1(transitive)

• + Addedcommander@2.9.0(transitive)

• + Addedgraceful-readlink@1.0.1(transitive)

• + Addedlong@3.2.0(transitive)

• + Addedpbjs@0.0.5(transitive)

• + Addedprotocol-buffers-schema@3.1.0(transitive)