New Case Study:See how Anthropic automated 95% of dependency reviews with Socket.Learn More →
@wordpress/dependency-extraction-webpack-plugin
Advanced tools
@wordpress/dependency-extraction-webpack-plugin - npm Package Compare versions
Comparing version 3.1.2-next.a2b36aa19d.0 to 3.1.2
| { | ||
| "name": "@wordpress/dependency-extraction-webpack-plugin", | ||
| "version": "3.1.2-next.a2b36aa19d.0", | ||
| "version": "3.1.2", | ||
| "description": "Extract WordPress script dependencies from webpack bundles.", | ||
@@ -41,3 +41,3 @@ "author": "The WordPress Contributors", | ||
| }, | ||
| "gitHead": "28341d3a23765adfcd6518aac35cba1b1e812752" | ||
| "gitHead": "a71b0769184b8b1cf0c86f3c99d452ef7491b096" | ||
| } |
Fixed alerts
New author
Supply chain riskA new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.
Found 1 instance in 1 package
No v1
QualityPackage is not semver >=1. This means it is not stable and does not support ^ ranges.
Found 1 instance in 1 package
Improved metrics
- Number of low quality alerts
- decreased by-100%
0
- Number of medium supply chain risk alerts
- decreased by-100%
0
Worsened metrics
- Total package byte prevSize
- decreased by-0.05%
39685
No dependency changes