@renovatebot/ruby-semver - npm Package Compare versions

Comparing version 1.0.0 to 1.1.0

package.json

 {
   "name": "@renovatebot/ruby-semver",
-  "version": "1.0.0",
+  "version": "1.1.0",
   "license": "MIT",
@@ -29,24 +29,25 @@ "description": "Ruby SemVer in TypeScript.",
   "dependencies": {
-    "tslib": "2.1.0"
+    "tslib": "2.3.1"
   },
   "devDependencies": {
-    "@types/jest": "26.0.20",
-    "@typescript-eslint/eslint-plugin": "4.15.2",
-    "@typescript-eslint/parser": "4.15.2",
-    "babel-jest": "26.6.3",
+    "@types/jest": "27.4.0",
+    "@typescript-eslint/eslint-plugin": "4.33.0",
+    "@typescript-eslint/parser": "4.33.0",
+    "babel-jest": "27.4.6",
     "babel-plugin-dynamic-import-node": "2.3.3",
-    "codecov": "3.8.1",
-    "eslint": "7.20.0",
+    "conventional-changelog-conventionalcommits": "4.6.3",
+    "eslint": "7.32.0",
     "eslint-config-airbnb-typescript": "12.3.1",
-    "eslint-config-prettier": "8.1.0",
-    "eslint-plugin-import": "2.22.1",
+    "eslint-config-prettier": "8.3.0",
+    "eslint-plugin-import": "2.25.4",
     "eslint-plugin-promise": "4.3.1",
-    "jest": "26.6.3",
-    "jest-junit": "12.0.0",
-    "jest-silent-reporter": "0.4.0",
+    "jest": "27.4.7",
+    "jest-junit": "13.0.0",
+    "jest-silent-reporter": "0.5.0",
     "npm-run-all": "4.1.5",
-    "prettier": "2.2.1",
-    "ts-jest": "26.5.1",
-    "typescript": "4.1.5"
+    "prettier": "2.5.1",
+    "semantic-release": "18.0.1",
+    "ts-jest": "27.1.2",
+    "typescript": "4.5.4"
   }
 }

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Empty package

Supply chain risk

Package does not contain any code. It may be removed, is name squatting, or the result of a faulty package publish.

Found 1 instance in 1 package

Major refactor

Supply chain risk

Package has recently undergone a major refactor. It may be unstable or indicate significant internal changes. Use caution when updating to versions that include significant changes.

Found 1 instance in 1 package

New author

Supply chain risk

A new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Worsened metrics

Total package byte prevSize

2821

decreased by-92.45%

Dev dependency count

19

increased by5.56%

Number of package files

3

decreased by-66.67%

Lines of code

0

decreased by-100%

Number of medium supply chain risk alerts

3

increased byInfinity%

Dependency changes

• + Addedtslib@2.3.1(transitive)

• - Removedtslib@2.1.0(transitive)

• Updatedtslib@2.3.1