@lerna/npm-publish - npm Package Compare versions

Comparing version 4.0.0 to 5.0.0-alpha.0

package.json

 {
   "name": "@lerna/npm-publish",
-  "version": "4.0.0",
+  "version": "5.0.0-alpha.0",
   "description": "An internal Lerna tool",
@@ -20,3 +20,3 @@ "keywords": [
   "engines": {
-    "node": ">= 10.18.0"
+    "node": "^14.19.3 || >=16.0.0"
   },
@@ -35,4 +35,4 @@ "publishConfig": {
   "dependencies": {
-    "@lerna/otplease": "4.0.0",
-    "@lerna/run-lifecycle": "4.0.0",
+    "@lerna/otplease": "5.0.0-alpha.0",
+    "@lerna/run-lifecycle": "5.0.0-alpha.0",
     "fs-extra": "^9.1.0",
@@ -45,3 +45,3 @@ "libnpmpublish": "^4.0.0",
   },
-  "gitHead": "4582c476e07dddddd6b2e3ab6e7f52c1f9eed59a"
+  "gitHead": "5451a79392742a6e942a845de1e46db0a41b1c2e"
 }

New alerts

New author

Supply chain risk

A new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.

Found 1 instance in 1 package

No v1

Quality

Package is not semver >=1. This means it is not stable and does not support ^ ranges.

Found 1 instance in 1 package

Worsened metrics

Total package byte prevSize

5324

decreased by-69.2%

Number of package files

3

decreased by-40%

Number of low quality alerts

2

increased by100%

Number of medium supply chain risk alerts

1

increased byInfinity%

Dependency changes

• + Added@lerna/npm-conf@5.0.0-alpha.0(transitive)

• + Added@lerna/otplease@5.0.0-alpha.0(transitive)

• + Added@lerna/prompt@5.0.0-alpha.0(transitive)

• + Added@lerna/run-lifecycle@5.0.0-alpha.0(transitive)

• + Added@npmcli/node-gyp@2.0.0(transitive)

• + Added@npmcli/promise-spawn@3.0.0(transitive)

• + Added@npmcli/run-script@3.0.3(transitive)

• + Addedaproba@2.0.0(transitive)

• + Addedare-we-there-yet@3.0.1(transitive)

• + Addedcolor-support@1.1.3(transitive)

• + Addedgauge@4.0.4(transitive)

• + Addednode-gyp@8.4.1(transitive)

• + Addednopt@5.0.0(transitive)

• + Addednpmlog@6.0.2(transitive)

• + Addedread-package-json-fast@2.0.3(transitive)

• + Addedreadable-stream@3.6.2(transitive)

• + Addedwhich@2.0.2(transitive)

• - Removed@lerna/npm-conf@4.0.0(transitive)

• - Removed@lerna/otplease@4.0.0(transitive)

• - Removed@lerna/prompt@4.0.0(transitive)

• - Removed@lerna/run-lifecycle@4.0.0(transitive)

• - Removedajv@6.12.6(transitive)

• - Removedasn1@0.2.6(transitive)

• - Removedassert-plus@1.0.0(transitive)

• - Removedasynckit@0.4.0(transitive)

• - Removedaws-sign2@0.7.0(transitive)

• - Removedaws4@1.13.0(transitive)

• - Removedbcrypt-pbkdf@1.0.2(transitive)

• - Removedbyline@5.0.0(transitive)

• - Removedcaseless@0.12.0(transitive)

• - Removedchownr@1.1.4(transitive)

• - Removedcombined-stream@1.0.8(transitive)

• - Removedcore-util-is@1.0.2(transitive)

• - Removeddashdash@1.14.1(transitive)

• - Removeddelayed-stream@1.0.0(transitive)

• - Removedecc-jsbn@0.1.2(transitive)

• - Removedextend@3.0.2(transitive)

• - Removedextsprintf@1.3.0(transitive)

• - Removedfast-deep-equal@3.1.3(transitive)

• - Removedfast-json-stable-stringify@2.1.0(transitive)

• - Removedforever-agent@0.6.1(transitive)

• - Removedform-data@2.3.3(transitive)

• - Removedfs-minipass@1.2.7(transitive)

• - Removedgetpass@0.1.7(transitive)

• - Removedhar-schema@2.0.0(transitive)

• - Removedhar-validator@5.1.5(transitive)

• - Removedhttp-signature@1.2.0(transitive)

• - Removedis-typedarray@1.0.0(transitive)

• - Removedisstream@0.1.2(transitive)

• - Removedjsbn@0.1.1(transitive)

• - Removedjson-schema@0.4.0(transitive)

• - Removedjson-schema-traverse@0.4.1(transitive)

• - Removedjson-stringify-safe@5.0.1(transitive)

• - Removedjsprim@1.4.2(transitive)

• - Removedmime-db@1.52.0(transitive)

• - Removedmime-types@2.1.35(transitive)

• - Removedminimist@1.2.8(transitive)

• - Removedminipass@2.9.0(transitive)

• - Removedminizlib@1.3.3(transitive)

• - Removedmkdirp@0.5.6(transitive)

• - Removednode-gyp@5.1.1(transitive)

• - Removednopt@4.0.3(transitive)

• - Removednpm-lifecycle@3.1.5(transitive)

• - Removedoauth-sign@0.9.0(transitive)

• - Removedos-homedir@1.0.2(transitive)

• - Removedosenv@0.1.5(transitive)

• - Removedperformance-now@2.1.0(transitive)

• - Removedpsl@1.9.0(transitive)

• - Removedpunycode@2.3.1(transitive)

• - Removedqs@6.5.3(transitive)

• - Removedrequest@2.88.2(transitive)

• - Removedresolve-from@4.0.0(transitive)

• - Removedrimraf@2.7.1(transitive)

• - Removedsafe-buffer@5.2.1(transitive)

• - Removedsemver@5.7.2(transitive)

• - Removedslide@1.1.6(transitive)

• - Removedsshpk@1.18.0(transitive)

• - Removedtar@4.4.19(transitive)

• - Removedtough-cookie@2.5.0(transitive)

• - Removedtunnel-agent@0.6.0(transitive)

• - Removedtweetnacl@0.14.5(transitive)

• - Removeduid-number@0.0.6(transitive)

• - Removedumask@1.1.0(transitive)

• - Removeduri-js@4.4.1(transitive)

• - Removeduuid@3.4.0(transitive)

• - Removedverror@1.10.0(transitive)

• - Removedwhich@1.3.1(transitive)

• - Removedyallist@3.1.1(transitive)

• Updated@lerna/otplease@5.0.0-alpha.0

• Updated@lerna/run-lifecycle@5.0.0-alpha.0