abl-utils - npm Package Compare versions

Comparing version 0.4.8 to 0.4.9

package.json

 {
   "name": "abl-utils",
   "title": "ABL - utils",
-  "version": "0.4.8",
+  "version": "0.4.9",
   "license": "MIT",
@@ -26,3 +26,3 @@ "description": "description",
     "abl-constants": "git+ssh://github.com/bucket-list/constants.git#v0.1.12",
-    "abl-lang": "git+ssh://github.com/bucket-list/lang.git#v0.1.11",
+    "abl-lang": "git+ssh://github.com/bucket-list/lang.git#v0.2.1",
     "debug": "2.2.0",
@@ -36,3 +36,3 @@ "escape-string-regexp": "1.0.5",
   "devDependencies": {
-    "babel-config-trejgun": "git://github.com/TrejGun/babel-config-trejgun.git#v0.0.4",
+    "babel-config-trejgun": "git://github.com/TrejGun/babel-config-trejgun.git#v0.0.7",
     "eslint-config-trejgun": "git://github.com/TrejGun/eslint-config-trejgun.git#v0.0.2",
@@ -39,0 +39,0 @@ "istanbul": "^1.0.0-alpha",

source/misc.js

@@ -42,3 +42,3 @@ "use strict";
 	// url.format puts port 80 which we dont need
-	return `${protocol}://${hostname}${port === "80" ? "" : `:${port}`}/`;
+	return `${protocol}://${hostname}${port === "80" ? "" : `:${port}`}`;
 }

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Git dependency

Supply chain risk

Contains a dependency which resolves to a remote git URL. Dependencies fetched from git URLs are not immutable can be used to inject untrusted code or reduce the likelihood of a reproducible install.

Found 1 instance in 1 package

Manifest confusion

Supply chain risk

This package has inconsistent metadata. This could be malicious or caused by an error when publishing the package.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Git dependency

Supply chain risk

Contains a dependency which resolves to a remote git URL. Dependencies fetched from git URLs are not immutable can be used to inject untrusted code or reduce the likelihood of a reproducible install.

Found 1 instance in 1 package

Manifest confusion

Supply chain risk

This package has inconsistent metadata. This could be malicious or caused by an error when publishing the package.

Found 1 instance in 1 package

Worsened metrics

Total package byte prevSize

18359

decreased by-0.01%

Dependency changes

• Updatedabl-lang@git+ssh://github.com/bucket-list/lang.git#v0.2.1