@openware/cryptofont - npm Package Compare versions

Comparing version 0.1.1 to 0.1.4

package.json

 {
   "name": "@openware/cryptofont",
-  "version": "0.1.1",
+  "version": "0.1.4",
   "description": "CryptoBase Currency Icon Font and CSS",
   "main": "./dist/index.js",
   "types": "./dist/index.d.ts",
-  "files": [
-    "dist"
-  ],
-  "repository": "NONE",
+  "repository": "https://gitub.com/openware/cryptofont",
   "author": "Helios Technologies <[e-mail]>",
@@ -27,3 +24,3 @@ "license": "UNLICENSED",
   "devDependencies": {
-    "@openware/coding-standards": "^0.1.0",
+    "@openware/coding-standards": "^0.1.1",
     "@types/jest": "^23.3.12",
@@ -30,0 +27,0 @@ "@types/node": "^10.5.8",

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Native code

Supply chain risk

Contains native code (e.g., compiled binaries or shared libraries). Including native code can obscure malicious behavior.

Found 3 instances in 1 package

Major refactor

Supply chain risk

Package has recently undergone a major refactor. It may be unstable or indicate significant internal changes. Use caution when updating to versions that include significant changes.

Found 1 instance in 1 package

New author

Supply chain risk

A new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.

Found 1 instance in 1 package

No repository

Supply chain risk

Package does not have a linked source code repository. Without this field, a package will have no reference to the location of the source code use to generate the package.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Major refactor

Supply chain risk

Package has recently undergone a major refactor. It may be unstable or indicate significant internal changes. Use caution when updating to versions that include significant changes.

Found 1 instance in 1 package

New author

Supply chain risk

A new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.

Found 1 instance in 1 package

No repository

Supply chain risk

Package does not have a linked source code repository. Without this field, a package will have no reference to the location of the source code use to generate the package.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

1598098

increased by223.55%

Number of package files

22

increased by214.29%

Lines of code

1577

increased by1094.7%

Worsened metrics

Number of medium supply chain risk alerts

8

increased by60%

No dependency changes