@knit/needle - npm Package Compare versions

Comparing version 0.1.6 to 0.3.0

package.json

 {
-  "homepage": "https://github.com/knitjs/knit#readme",
-  "license": "MIT",
-  "bugs": {
-    "url": "https://github.com/knitjs/knit/issues"
-  },
-  "files": [
-    "dist",
-    "*.png",
-    "*.md"
-  ],
-  "repository": {
-    "type": "git",
-    "url": "git+https://github.com/knitjs/knit.git"
-  },
-  "engines": {
-    "node": ">=6",
-    "npm": ">=3"
-  },
-  "author": {
-    "name": "Shane Wilson"
-  },
-  "private": false,
   "name": "@knit/needle",
   "description": "Knitting needle",
-  "version": "0.1.6",
-  "main": "dist/lib/index.js",
-  "dependencies": {
-    "read-pkg-up": "2.0.0"
-  },
-  "peerDependencies": {},
-  "optionalDependencies": {}
+  "version": "0.3.0"
 }

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

New author

Supply chain risk

A new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.

Found 1 instance in 1 package

No contributors or author data

Maintenance

Package does not specify a list of contributors or an author in package.json.

Found 1 instance in 1 package

No bug tracker

Maintenance

Package does not have a linked bug tracker in package.json.

Found 1 instance in 1 package

No License Found

License

(Experimental) License information could not be found.

Found 1 instance in 1 package

No repository

Supply chain risk

Package does not have a linked source code repository. Without this field, a package will have no reference to the location of the source code use to generate the package.

Found 1 instance in 1 package

No website

Quality

Package does not have a website.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

73581

increased by4.78%

Dependency count

0

decreased by-100%

Number of package files

6

increased by50%

Worsened metrics

Number of low license alerts

1

increased byInfinity%

Number of low maintenance alerts

2

increased byInfinity%

Number of low quality alerts

2

increased by100%

Number of low supply chain risk alerts

11

increased by10%

Number of medium supply chain risk alerts

1

increased byInfinity%

Dependency changes

• - Removedread-pkg-up@2.0.0

• - Removederror-ex@1.3.2(transitive)

• - Removedfind-up@2.1.0(transitive)

• - Removedfunction-bind@1.1.2(transitive)

• - Removedgraceful-fs@4.2.11(transitive)

• - Removedhasown@2.0.2(transitive)

• - Removedhosted-git-info@2.8.9(transitive)

• - Removedis-arrayish@0.2.1(transitive)

• - Removedis-core-module@2.15.1(transitive)

• - Removedload-json-file@2.0.0(transitive)

• - Removedlocate-path@2.0.0(transitive)

• - Removednormalize-package-data@2.5.0(transitive)

• - Removedp-limit@1.3.0(transitive)

• - Removedp-locate@2.0.0(transitive)

• - Removedp-try@1.0.0(transitive)

• - Removedparse-json@2.2.0(transitive)

• - Removedpath-exists@3.0.0(transitive)

• - Removedpath-parse@1.0.7(transitive)

• - Removedpath-type@2.0.0(transitive)

• - Removedpify@2.3.0(transitive)

• - Removedread-pkg@2.0.0(transitive)

• - Removedread-pkg-up@2.0.0(transitive)

• - Removedresolve@1.22.8(transitive)

• - Removedsemver@5.7.2(transitive)

• - Removedspdx-correct@3.2.0(transitive)

• - Removedspdx-exceptions@2.5.0(transitive)

• - Removedspdx-expression-parse@3.0.1(transitive)

• - Removedspdx-license-ids@3.0.20(transitive)

• - Removedstrip-bom@3.0.0(transitive)

• - Removedsupports-preserve-symlinks-flag@1.0.0(transitive)

• - Removedvalidate-npm-package-license@3.0.4(transitive)