abp-stage
Advanced tools
abp-stage - npm Package Compare versions
Comparing version 1.3.12 to 1.3.13-0
| { | ||
| "name": "abp-stage", | ||
| "version": "1.3.12", | ||
| "version": "1.3.13-0", | ||
| "description": "A app builder plugin for Vue.js.", | ||
@@ -13,5 +13,5 @@ "keywords": [ | ||
| "dependencies": { | ||
| "h5-component": "git+ssh://git@github.com/eleme/h5-component#v4.2.4", | ||
| "h5-shopview": "git+ssh://git@github.com/eleme/h5-shopview#v3.4.4", | ||
| "h5-utils": "^0.4.3", | ||
| "geohash.js": "^1.0.0", | ||
| "h5-component": "git+ssh://git@github.com/eleme/h5-component.git#v5.13.12", | ||
| "h5-utils": "^0.4.9", | ||
| "sns-sdk": "git+ssh://git@github.com/eleme/sns-sdk#1.0.0-rc.6", | ||
@@ -18,0 +18,0 @@ "ux-component": "git+ssh://git@github.com/eleme/ux-component#1.2.0", |
Sorry, the diff of this file is not supported yet
Sorry, the diff of this file is too big to display
New alerts
License Policy Violation
LicenseThis package is not allowed per your license policy. Review the package's license to ensure compliance.
Found 1 instance in 1 package
Git dependency
Supply chain riskContains a dependency which resolves to a remote git URL. Dependencies fetched from git URLs are not immutable can be used to inject untrusted code or reduce the likelihood of a reproducible install.
Found 1 instance in 1 package
No v1
QualityPackage is not semver >=1. This means it is not stable and does not support ^ ranges.
Found 1 instance in 1 package
Fixed alerts
License Policy Violation
LicenseThis package is not allowed per your license policy. Review the package's license to ensure compliance.
Found 1 instance in 1 package
Git dependency
Supply chain riskContains a dependency which resolves to a remote git URL. Dependencies fetched from git URLs are not immutable can be used to inject untrusted code or reduce the likelihood of a reproducible install.
Found 2 instances in 1 package
Manifest confusion
Supply chain riskThis package has inconsistent metadata. This could be malicious or caused by an error when publishing the package.
Found 2 instances in 1 package
Improved metrics
- Number of high supply chain risk alerts
- decreased by-20%
4
- Number of medium supply chain risk alerts
- decreased by-28.57%
5
Worsened metrics
- Total package byte prevSize
- decreased by-20.49%
181953
- Number of low quality alerts
- increased by100%
2
Dependency changes
+ Addedgeohash.js@^1.0.0
+ Addedgeohash.js@1.0.0(transitive)
- Removedh5-shopview@git+ssh://git@github.com/eleme/h5-shopview#v3.4.4
Updatedh5-component@git+ssh://git@github.com/eleme/h5-component.git#v5.13.12
Updatedh5-utils@^0.4.9