@labshare/services-auth - npm Package Compare versions

Comparing version 2.1.4 to 2.1.5

package.json

 {
   "name": "@labshare/services-auth",
-  "version": "2.1.4",
+  "version": "2.1.5",
   "description": "LabShare Services plugin for resource scope-based HTTP route and socket authorization",
@@ -31,3 +31,3 @@ "main": "./",
     "deprecate": "1.0.0",
-    "express-jwt": "github:KalleV/express-jwt#dad0daebe354a9ad0fc8ab160e406fd5a3cac7d9",
+    "express-jwt": "github:KalleV/express-jwt",
     "express-jwt-authz": "^1.0.0",
@@ -34,0 +34,0 @@ "jwks-rsa": "^1.2.1",

README.md

@@ -101,2 +101,1 @@ [![semantic-release](https://img.shields.io/badge/%20%20%F0%9F%93%A6%F0%9F%9A%80-semantic--release-e10079.svg)](https://github.com/semantic-release/semantic-release)
 `npm test`
-

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

GitHub dependency

Supply chain risk

Contains a dependency which resolves to a GitHub URL. Dependencies fetched from GitHub specifiers are not immutable can be used to inject untrusted code or reduce the likelihood of a reproducible install.

Found 1 instance in 1 package

New author

Supply chain risk

A new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

GitHub dependency

Supply chain risk

Contains a dependency which resolves to a GitHub URL. Dependencies fetched from GitHub specifiers are not immutable can be used to inject untrusted code or reduce the likelihood of a reproducible install.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

52154

increased by103.83%

Number of package files

21

increased by31.25%

Worsened metrics

Number of lines in readme file

101

decreased by-0.98%

Number of medium supply chain risk alerts

1

increased byInfinity%

Dependency changes

• Updatedexpress-jwt@github:KalleV/express-jwt