@yarnpkg/lockfile - npm Package Compare versions

Comparing version 1.0.0 to 1.0.1

package.json

 {
   "name": "@yarnpkg/lockfile",
-  "version": "1.0.0",
+  "version": "1.0.1",
   "description": "The parser/stringifier for Yarn lockfiles.",
   "main": "index.js",
+  "repository": "https://github.com/yarnpkg/yarn/blob/master/packages/lockfile",
+  "keywords": [
+    "yarn",
+    "yarnpkg",
+    "lockfile",
+    "dependency",
+    "npm"
+  ],
   "license": "BSD-2-Clause"
 }

README.md

 # yarn-lockfile
-parse and/or write `yarn.lock` files
 
-## Usage Example
+Parse and/or write `yarn.lock` files
 
+## Usage Examples
+
 ```js
 const fs = require('fs');
 const lockfile = require('@yarnpkg/lockfile');
+// or (es6)
+import fs from 'fs';
+import * as lockfile from '@yarnpkg/lockfile';
 
@@ -10,0 +14,0 @@ let file = fs.readFileSync('yarn.lock', 'utf8');

New alerts

New author

Supply chain risk

A new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 1 instance in 1 package

Fixed alerts

Network access

Supply chain risk

This module accesses the network.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 1 instance in 1 package

No repository

Supply chain risk

Package does not have a linked source code repository. Without this field, a package will have no reference to the location of the source code use to generate the package.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

262302

increased by9.41%

Lines of code

8144

increased by6.9%

Number of lines in readme file

23

increased by21.05%

Worsened metrics

Number of low supply chain risk alerts

54

increased by86.21%

No dependency changes