@prettier/plugin-php - npm Package Compare versions

Comparing version 0.17.4 to 0.17.5

package.json

 {
   "name": "@prettier/plugin-php",
-  "version": "0.17.4",
+  "version": "0.17.5",
   "description": "Prettier PHP Plugin",
@@ -16,3 +16,3 @@ "repository": "prettier/prettier-php",
     "mem": "^8.0.0",
-    "php-parser": "https://github.com/glayzzle/php-parser#e61e26102144f267ecf5e09020865a9baa6ca2f1"
+    "php-parser": "glayzzle/php-parser#4c5b0675f52c0baab2e5b10a4e50e5d7a79b2767"
   },
@@ -19,0 +19,0 @@ "devDependencies": {

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

GitHub dependency

Supply chain risk

Contains a dependency which resolves to a GitHub URL. Dependencies fetched from GitHub specifiers are not immutable can be used to inject untrusted code or reduce the likelihood of a reproducible install.

Found 1 instance in 1 package

Manifest confusion

Supply chain risk

This package has inconsistent metadata. This could be malicious or caused by an error when publishing the package.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

HTTP dependency

Supply chain risk

Contains a dependency which resolves to a remote HTTP URL which could be used to inject untrusted code and reduce overall package reliability.

Found 1 instance in 1 package

Manifest confusion

Supply chain risk

This package has inconsistent metadata. This could be malicious or caused by an error when publishing the package.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

351249

increased by0.07%

Lines of code

5659

increased by0.09%

Dependency changes

• Updatedphp-parser@glayzzle/php-parser#4c5b0675f52c0baab2e5b10a4e50e5d7a79b2767