@sanity/observable - npm Package Compare versions

Comparing version 1.148.5-document-actions.23 to 1.149.0

package.json

 {
   "name": "@sanity/observable",
   "description": "[deprecated] This package exists for legacy reasons only",
-  "version": "1.148.5-document-actions.23+27abd940c",
+  "version": "1.149.0",
   "main": "minimal.js",
@@ -40,3 +40,3 @@ "types": "./minimal.d.ts",
   "homepage": "https://www.sanity.io/",
-  "gitHead": "27abd940c7dd0ed9f9561ccbceb969c0b8562d94"
+  "gitHead": "a8e0a50ffb60756d5057788d95aaee012e8a00e6"
 }

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

New author

Supply chain risk

A new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Manifest confusion

Supply chain risk

This package has inconsistent metadata. This could be malicious or caused by an error when publishing the package.

Found 1 instance in 1 package

No v1

Quality

Package is not semver >=1. This means it is not stable and does not support ^ ranges.

Found 1 instance in 1 package

Improved metrics

Number of low quality alerts

0

decreased by-100%

Worsened metrics

Total package byte prevSize

7909

decreased by-64.4%

Number of package files

12

decreased by-36.84%

No dependency changes