@yoctol/kurator - npm Package Compare versions

Comparing version 0.5.0 to 0.5.1

package.json

 {
   "name": "@yoctol/kurator",
   "license": "UNLICENSED",
-  "version": "0.5.0",
+  "version": "0.5.1",
   "main": "src/index.js",
@@ -17,10 +17,10 @@ "files": [
     "axios": "^0.18.0",
-    "bottender-compose": "^0.9.1",
+    "bottender-compose": "^0.10.2",
     "lodash": "^4.17.10"
   },
   "devDependencies": {
-    "cross-env": "^5.1.4",
-    "jest": "^22.4.3",
+    "cross-env": "^5.2.0",
+    "jest": "^23.4.1",
     "jest-junit": "^5.1.0",
-    "nock": "^9.4.2"
+    "nock": "^9.4.3"
   },
@@ -27,0 +27,0 @@ "jest": {

Fixed alerts

New author

Supply chain risk

A new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

42702

Number of medium supply chain risk alerts

0

decreased by-100%

Dependency changes

• + Addedbottender-compose@0.10.3(transitive)

• + Addeddelay@3.1.0(transitive)

• + Addedwarning@4.0.3(transitive)

• - Removedbottender-compose@0.9.1(transitive)

• - Removeddelay@2.0.0(transitive)

• - Removedp-defer@1.0.0(transitive)

• - Removedwarning@3.0.0(transitive)

• Updatedbottender-compose@^0.10.2