access-sniff - npm Package Compare versions

Comparing version 2.3.21 to 2.4.0

dist/accesssniff.js

@@ -235,3 +235,3 @@ 'use strict';
       // Fullfill the passed promise
-      deferred.fulfill(messageLog);
+      deferred.resolve(messageLog);
     }
@@ -284,3 +284,3 @@ }, {
           _logger2.default.generError(error);
-          deferredOutside.fulfill(error);
+          deferredOutside.reject(error);
         }
@@ -287,0 +287,0 @@

package.json

 {
   "name": "access-sniff",
-  "version": "2.3.21",
+  "version": "2.4.0",
   "description": "A node/iojs library & CLI for HTML_Codesniffer",
@@ -30,6 +30,10 @@ "main": "dist/",
   ],
+  "files": [
+    "bin",
+    "dist"
+  ],
   "dependencies": {
-    "HTML_CodeSniffer": "github:squizlabs/HTML_CodeSniffer#2.0.6",
-    "axios": "^0.8.1",
-    "bluebird": "^2.9.13",
+    "HTML_CodeSniffer": "squizlabs/HTML_CodeSniffer#2.0.7",
+    "axios": "^0.9.1",
+    "bluebird": "^3.3.1",
     "chalk": "^1.1.1",
@@ -40,3 +44,3 @@ "commander": "^2.6.0",
     "underscore": "^1.8.2",
-    "validator": "^3.39.0"
+    "validator": "^5.0.0"
   },
@@ -52,3 +56,3 @@ "devDependencies": {
     "gulp-concat": "^2.6.0",
-    "gulp-eslint": "^1.1.1",
+    "gulp-eslint": "^2.0.0",
     "gulp-istanbul": "^0.10.3",
@@ -55,0 +59,0 @@ "gulp-nodeunit": "0.0.5",

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

GitHub dependency

Supply chain risk

Contains a dependency which resolves to a GitHub URL. Dependencies fetched from GitHub specifiers are not immutable can be used to inject untrusted code or reduce the likelihood of a reproducible install.

Found 1 instance in 1 package

Major refactor

Supply chain risk

Package has recently undergone a major refactor. It may be unstable or indicate significant internal changes. Use caution when updating to versions that include significant changes.

Found 1 instance in 1 package

Manifest confusion

Supply chain risk

This package has inconsistent metadata. This could be malicious or caused by an error when publishing the package.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

GitHub dependency

Supply chain risk

Contains a dependency which resolves to a GitHub URL. Dependencies fetched from GitHub specifiers are not immutable can be used to inject untrusted code or reduce the likelihood of a reproducible install.

Found 1 instance in 1 package

NPM Shrinkwrap

Supply chain risk

Package contains a shrinkwrap file. This may allow the package to bypass normal install procedures.

Found 1 instance in 1 package

Improved metrics

Number of high supply chain risk alerts

1

decreased by-50%

Number of low supply chain risk alerts

2

decreased by-66.67%

Worsened metrics

Total package byte prevSize

125522

decreased by-68.36%

Number of package files

11

decreased by-71.05%

Lines of code

827

decreased by-70.26%

Number of medium supply chain risk alerts

3

increased by50%

Dependency changes

• + Addedaxios@0.9.1(transitive)

• + Addedbluebird@3.7.2(transitive)

• + Addedvalidator@5.7.0(transitive)

• - Removedaxios@0.8.1(transitive)

• - Removedbluebird@2.11.0(transitive)

• - Removedvalidator@3.43.0(transitive)

• UpdatedHTML_CodeSniffer@squizlabs/HTML_CodeSniffer#2.0.7

• Updatedaxios@^0.9.1

• Updatedbluebird@^3.3.1

• Updatedvalidator@^5.0.0