@minkimcello/georgia - npm Package Compare versions

Comparing version 1.0.0-f85f591 to 1.0.10

package.json

 {
   "name": "@minkimcello/georgia",
-  "version": "1.0.0-f85f591",
-  "author": "Min Kim"
+  "version": "1.0.10",
+  "author": {
+    "name": "Min Kim",
+    "email": "[e-mail]"
+  },
+  "scripts": {
+    "test": "mocha"
+  },
+  "devDependencies": {
+    "mocha": "^6.2.0"
+  }
 }

README.md

@@ -0,2 +1,12 @@
+
+# Checklist
+- [x] Run tests
+- [x] Check publishing
+- [x] Create diagram
+
+# Setup Instructions
 1. add DANGER_GITHUB from bot token (public repo) in secrets
-2. add NPM_AUTH_TOKEN from npmjs in secrets
+2. add NPM_AUTH_TOKEN from npmjs in secrets
+3. add MK_TOKEN from github account that you want automatically committing
+4. add author in package.json (follow format)
+4. add tests in the two workflows

New alerts

Native code

Supply chain risk

Contains native code (e.g., compiled binaries or shared libraries). Including native code can obscure malicious behavior.

Found 1 instance in 1 package

Fixed alerts

Trivial Package

Supply chain risk

Packages less than 10 lines of code are easily copied into your own project and may not warrant the additional supply chain risk of an external dependency.

Found 1 instance in 1 package

No v1

Quality

Package is not semver >=1. This means it is not stable and does not support ^ ranges.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

14480041

increased by791159.07%

Number of package files

71

increased by1320%

Lines of code

23

increased by155.56%

Number of low quality alerts

1

decreased by-50%

Number of lines in readme file

12

increased by500%

Worsened metrics

Dev dependency count

1

increased byInfinity%

Number of medium supply chain risk alerts

2

increased by100%

No dependency changes