@wmfs/xml-flatten2csv
Advanced tools
Comparing version 1.6.0 to 1.7.0
@@ -0,1 +1,8 @@ | ||
# [1.7.0](https://github.com/wmfs/xml-flatten2csv/compare/v1.6.0...v1.7.0) (2021-05-10) | ||
### 🛠 Builds | ||
* **deps:** use master branch for wmfs/jsonpath [ch6167] ([f27354a](https://github.com/wmfs/xml-flatten2csv/commit/f27354a305bc709781fe15bba310870ca53c239b)) | ||
# [1.6.0](https://github.com/wmfs/xml-flatten2csv/compare/v1.5.0...v1.6.0) (2021-05-10) | ||
@@ -2,0 +9,0 @@ |
{ | ||
"name": "@wmfs/xml-flatten2csv", | ||
"version": "1.6.0", | ||
"version": "1.7.0", | ||
"description": "Flattened XML file to CSV file", | ||
@@ -24,3 +24,3 @@ "author": "West Midlands Fire Service", | ||
"dependencies": { | ||
"jsonpath": "1.1.1", | ||
"jsonpath": "wmfs/jsonpath#master", | ||
"mkdirp": "1.0.4", | ||
@@ -27,0 +27,0 @@ "sax": "1.2.4" |
GitHub dependency
Supply chain riskContains a dependency which resolves to a GitHub URL. Dependencies fetched from GitHub specifiers are not immutable can be used to inject untrusted code or reduce the likelihood of a reproducible install.
Found 1 instance in 1 package
Manifest confusion
Supply chain riskThis package has inconsistent metadata. This could be malicious or caused by an error when publishing the package.
Found 1 instance in 1 package
87304
1
1
- Removeddeep-is@0.1.4(transitive)
- Removedescodegen@1.14.3(transitive)
- Removedesprima@1.2.24.0.1(transitive)
- Removedestraverse@4.3.0(transitive)
- Removedesutils@2.0.3(transitive)
- Removedfast-levenshtein@2.0.6(transitive)
- Removedjsonpath@1.1.1(transitive)
- Removedlevn@0.3.0(transitive)
- Removedoptionator@0.8.3(transitive)
- Removedprelude-ls@1.1.2(transitive)
- Removedsource-map@0.6.1(transitive)
- Removedstatic-eval@2.0.2(transitive)
- Removedtype-check@0.3.2(transitive)
- Removedunderscore@1.12.1(transitive)
- Removedword-wrap@1.2.5(transitive)