@tayeh/web-client
Advanced tools
Comparing version 1.0.9 to 1.1.0-alpha
| { | ||
| "name": "@tayeh/web-client", | ||
| "version": "1.0.9", | ||
| "version": "1.1.0-alpha", | ||
| "description": "tayeh shop-api client", | ||
@@ -14,3 +14,3 @@ "main": "dist/index.js", | ||
| "dev": "microbundle watch", | ||
| "publish": "npm run test && npm run build && cp ./package.json ./dist/package.json && cd ./dist/ && npm publish --publich" | ||
| "package": "npm run test && npm run build && cp ./package.json ./dist/package.json && cd ./dist/ && npm publish --publich" | ||
| }, | ||
@@ -17,0 +17,0 @@ "repository": { |
New alerts
Environment variable access
Supply chain riskPackage accesses environment variables, which may be a sign of credential stuffing or data theft.
Found 2 instances in 1 package
No v1
QualityPackage is not semver >=1. This means it is not stable and does not support ^ ranges.
Found 1 instance in 1 package
Fixed alerts
Deprecated
MaintenanceThe maintainer of the package marked it as deprecated. This could indicate that a single version should not be used, or that the package is no longer maintained and any new vulnerabilities will not be fixed.
Found 1 instance in 1 package
Major refactor
Supply chain riskPackage has recently undergone a major refactor. It may be unstable or indicate significant internal changes. Use caution when updating to versions that include significant changes.
Found 1 instance in 1 package
Environment variable access
Supply chain riskPackage accesses environment variables, which may be a sign of credential stuffing or data theft.
Found 1 instance in 1 package
Improved metrics
- Total package byte prevSize
- increased by0.01%
119793
- Number of high maintenance alerts
- decreased by-100%
0
- Number of low supply chain risk alerts
- decreased by-50%
8
- Number of medium supply chain risk alerts
- decreased by-100%
0
Worsened metrics
- Number of low quality alerts
- increased by50%
3