a11y-utility-classes - npm Package Compare versions

Comparing version 0.0.1-security to 0.1.0

package.json

 {
   "name": "a11y-utility-classes",
-  "version": "0.0.1-security",
-  "description": "security holding package",
-  "repository": "npm/security-holder"
+  "version": "0.1.0",
+  "description": "Helpful utility classes to assist with making web projects more accessible.",
+  "main": "index.css",
+  "scripts": {
+    "test": "echo \"Error: no test specified\" && exit 1"
+  },
+  "keywords": [
+    "css",
+    "a11y",
+    "utility",
+    "accessibility"
+  ],
+  "author": "Jack Lo Russo <[e-mail]>",
+  "license": "MIT"
 }

README.md

@@ -1,9 +0,20 @@
-# Security holding package
+# a11y-utility-classes
 
-This package name is not currently in use, but was formerly occupied
-by another package. To avoid malicious use, npm is hanging on to the
-package name, but loosely, and we'll probably give it to you if you
-want it.
+Helpful utility classes to assist with making web projects more accessible.
 
-You may adopt this package by contacting [e-mail] and
-requesting the name.
+You can copy the CSS directly, or install via NPM.
+
+```
+yarn add a11y-utility-classes
+```
+
+## Many thanks
+
+Everything here has been taught by others:
+
+* Julie Grundy [@stringy](https://twitter.com/stringy)
+* Heydon Pickering [@heydonworks](https://twitter.com/heydonworks)
+
+## See also
+
+* [a11y.css](https://ffoodd.github.io/a11y.css/) — CSS that intends to warn developers about possible risks and mistakes that exist in HTML code

New alerts

New author

Supply chain risk

A new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.

Found 1 instance in 1 package

No repository

Supply chain risk

Package does not have a linked source code repository. Without this field, a package will have no reference to the location of the source code use to generate the package.

Found 1 instance in 1 package

No tests

Quality

Package does not have any tests. This is a strong signal of a poorly maintained or low quality package.

Found 1 instance in 1 package

Fixed alerts

Known malware

Supply chain risk

This package is malware. We have asked the package registry to remove it.

Found 1 instance in 1 package

Empty package

Supply chain risk

Package does not contain any code. It may be removed, is name squatting, or the result of a faulty package publish.

Found 1 instance in 1 package

No contributors or author data

Maintenance

Package does not specify a list of contributors or an author in package.json.

Found 1 instance in 1 package

No License Found

License

(Experimental) License information could not be found.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

2595

increased by440.63%

Number of package files

4

increased by100%

Number of low license alerts

0

decreased by-100%

Lines of code

25

increased byInfinity%

Number of low maintenance alerts

2

decreased by-33.33%

Number of lines in readme file

21

increased by110%

Number of critical supply chain risk alerts

0

decreased by-100%

Worsened metrics

Number of low quality alerts

3

increased by50%

No dependency changes