@rescript/tools - npm Package Compare versions

Comparing version 0.3.0 to 0.4.0

package.json

 {
 	"name": "@rescript/tools",
 	"description": "ReScript Tools",
-	"version": "0.3.0",
+	"version": "0.4.0",
 	"author": "ReScript Team",
 	"license": "MIT",
 	"bin": {
-		"rescript-tools": "./src/Cli.bs.js"
+		"rescript-tools": "npm/cli.js"
 	},
@@ -16,6 +16,6 @@ "keywords": [
 	"files": [
-		"src/Cli.bs.js",
-		"src/*.res",
-		"src/*.resi",
-		"analysis_binaries/",
+		"npm/cli.js",
+		"npm/*.res",
+		"npm/*.resi",
+		"binaries",
 		"rescript.json",
@@ -22,0 +22,0 @@ "README.md"

rescript.json

 {
   "name": "@rescript/tools",
-  "version": "0.2.0",
+  "version": "0.3.0",
   "sources": [
     {
-      "dir": "src"
+      "dir": "npm"
     }
@@ -8,0 +8,0 @@ ],

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Native code

Supply chain risk

Contains native code (e.g., compiled binaries or shared libraries). Including native code can obscure malicious behavior.

Found 4 instances in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Native code

Supply chain risk

Contains native code (e.g., compiled binaries or shared libraries). Including native code can obscure malicious behavior.

Found 4 instances in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

Improved metrics

Number of low supply chain risk alerts

0

decreased by-100%

Worsened metrics

Total package byte prevSize

33916732

decreased by-24.01%

Number of package files

12

decreased by-20%

Lines of code

27

decreased by-78.74%

No dependency changes