Comparing version 1.0.5 to 1.0.6
{ | ||
"name": "abl-utils", | ||
"title": "ABL - utils", | ||
"version": "1.0.5", | ||
"version": "1.0.6", | ||
"license": "MIT", | ||
@@ -25,7 +25,7 @@ "description": "description", | ||
"dependencies": { | ||
"abl-constants": "git+ssh://github.com/bucket-list/constants.git#v0.3.1", | ||
"abl-lang": "git+ssh://github.com/bucket-list/lang.git#v0.3.14", | ||
"abl-constants": "git+ssh://github.com/bucket-list/constants.git#v0.3.5", | ||
"abl-lang": "git+ssh://github.com/bucket-list/lang.git#v0.3.15", | ||
"debug": "2.2.0", | ||
"lodash": "4.11.2", | ||
"moment-config-trejgun": "git://github.com/TrejGun/moment-config-trejgun.git#v0.0.4", | ||
"moment-config-trejgun": "git://github.com/TrejGun/moment-config-trejgun.git#v0.0.6", | ||
"qs": "6.1.0" | ||
@@ -32,0 +32,0 @@ }, |
License Policy Violation
LicenseThis package is not allowed per your license policy. Review the package's license to ensure compliance.
Found 1 instance in 1 package
Git dependency
Supply chain riskContains a dependency which resolves to a remote git URL. Dependencies fetched from git URLs are not immutable can be used to inject untrusted code or reduce the likelihood of a reproducible install.
Found 3 instances in 1 package
Manifest confusion
Supply chain riskThis package has inconsistent metadata. This could be malicious or caused by an error when publishing the package.
Found 2 instances in 1 package
License Policy Violation
LicenseThis package is not allowed per your license policy. Review the package's license to ensure compliance.
Found 1 instance in 1 package
Git dependency
Supply chain riskContains a dependency which resolves to a remote git URL. Dependencies fetched from git URLs are not immutable can be used to inject untrusted code or reduce the likelihood of a reproducible install.
Found 3 instances in 1 package
Manifest confusion
Supply chain riskThis package has inconsistent metadata. This could be malicious or caused by an error when publishing the package.
Found 2 instances in 1 package