DOMBuilder - npm Package Compare versions

Comparing version 2.0.1 to 2.1.0

package.json

 {
-  "name": "DOMBuilder",
-  "description": "Builder library - generate HTML with an API which is also usable in the browser",
-  "version": "2.0.1",
-  "author": "Jonathan Buchanan <[e-mail]> (https://github.com/insin)",
-  "tags": ["HTML", "builder"],
-  "homepage": "http://readthedocs.org/docs/dombuilder/en/latest/",
-  "main": "index",
-  "repository": {
-    "type": "git",
-    "url": "https://github.com/insin/DOMBuilder.git"
+  "name": "DOMBuilder"
+, "description": "Builder library - generate HTML with an API which is also usable in the browser"
+, "version": "2.1.0"
+, "author": "Jonathan Buchanan <[e-mail]> (https://github.com/insin)"
+, "tags": ["dualsided", "DOM", "HTML", "builder", "templates"]
+, "main": "./lib/dombuilder"
+, "repository": {
+    "type": "git"
+  , "url": "https://github.com/insin/DOMBuilder.git"
   }
+, "dependencies": {
+    "isomorph": "0.1.x"
+  }
+, "devDependencies": {
+    "qunit": "0.2.x"
+  , "buildumb": "0.1.x"
+  }
+, "scripts": {
+    "test": "node tests/tests.js"
+  }
 }

New alerts

Major refactor

Supply chain risk

Package has recently undergone a major refactor. It may be unstable or indicate significant internal changes. Use caution when updating to versions that include significant changes.

Found 1 instance in 1 package

New author

Supply chain risk

A new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.

Found 1 instance in 1 package

Uses eval

Supply chain risk

Package uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Found 1 instance in 1 package

No website

Quality

Package does not have a website.

Found 1 instance in 1 package

Fixed alerts

Non-existent author

Supply chain risk

The package was published by an npm account that no longer exists.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

75888

increased by73.78%

Number of package files

14

increased by133.33%

Lines of code

2099

increased by94.71%

Number of lines in readme file

254

increased by0.79%

Number of high supply chain risk alerts

0

decreased by-100%

Worsened metrics

Dependency count

1

increased byInfinity%

Dev dependency count

2

increased byInfinity%

Number of low quality alerts

1

increased byInfinity%

Number of medium supply chain risk alerts

4

increased byInfinity%

Dependency changes

• + Addedisomorph@0.1.x

• + Addedisomorph@0.1.10(transitive)