@line/bot-sdk - npm Package Compare versions

Comparing version 6.0.2 to 6.0.3

CHANGELOG.md

@@ -1,3 +0,11 @@
-## 6.0.2 (21 May 2018(
+## 6.0.3 (18 June 2018)
 
+#### Misc
+
+* Move get-audio-duration dep to proper package.json (#73)
+* Vulnerability fix with `npm audit fix`
+
+
+## 6.0.2 (21 May 2018)
+
 #### Type
@@ -4,0 +12,0 @@

package.json

 {
   "name": "@line/bot-sdk",
-  "version": "6.0.2",
+  "version": "6.0.3",
   "description": "Node.js SDK for LINE Messaging API",
@@ -45,4 +45,3 @@ "engines": {
     "body-parser": "^1.18.2",
-    "file-type": "^7.2.0",
-    "get-audio-duration": "0.0.1"
+    "file-type": "^7.2.0"
   },
@@ -53,6 +52,6 @@ "devDependencies": {
     "del-cli": "^1.1.0",
-    "express": "^4.15.3",
-    "gitbook-cli": "^2.3.0",
+    "express": "^4.16.3",
+    "gitbook-cli": "^2.3.2",
     "husky": "^0.14.3",
-    "mocha": "^3.4.2",
+    "mocha": "^5.2.0",
     "prettier": "^1.8.2",
@@ -59,0 +58,0 @@ "ts-node": "^3.3.0",

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

New author

Supply chain risk

A new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Native code

Supply chain risk

Contains native code (e.g., compiled binaries or shared libraries). Including native code can obscure malicious behavior.

Found 55 instances in 1 package

Improved metrics

Dependency count

6

decreased by-14.29%

Number of medium supply chain risk alerts

7

decreased by-88.52%

Worsened metrics

Total package byte prevSize

1874242

decreased by-30.68%

Number of package files

85

decreased by-47.53%

Dependency changes

• + Addedhas-proto@1.1.0(transitive)

• + Addedhas-symbols@1.1.0(transitive)

• - Removedget-audio-duration@0.0.1

• - Removedany-promise@1.3.0(transitive)

• - Removedget-audio-duration@0.0.1(transitive)

• - Removedhas-proto@1.0.3(transitive)

• - Removedhas-symbols@1.0.3(transitive)

• - Removedmz@1.3.0(transitive)

• - Removednative-or-bluebird@1.2.0(transitive)

• - Removedthenify@3.3.1(transitive)

• - Removedthenify-all@1.6.0(transitive)