@zomoz/icon-font - npm Package Compare versions

Comparing version 0.1.1 to 0.2.0

package.json

 {
   "name": "@zomoz/icon-font",
-  "version": "0.1.1",
+  "version": "0.2.0",
   "description": "Icon Font for ZomoZ projects",
   "private": false,
   "scripts": {
-    "build": "fontforge -script build.pe icon-font.sfd"
+    "build": "fontforge -script build.py",
+    "prepublish": "npm run build"
   },
@@ -9,0 +10,0 @@ "repository": {

New alerts

Native code

Supply chain risk

Contains native code (e.g., compiled binaries or shared libraries). Including native code can obscure malicious behavior.

Found 1 instance in 1 package

New author

Supply chain risk

A new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.

Found 1 instance in 1 package

Fixed alerts

Empty package

Supply chain risk

Package does not contain any code. It may be removed, is name squatting, or the result of a faulty package publish.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

430456

increased by1782.68%

Number of package files

111

increased by1750%

Lines of code

28

increased byInfinity%

Worsened metrics

Number of medium supply chain risk alerts

3

increased by50%

No dependency changes