aesthetic - npm Package Compare versions

Comparing version 0.0.0 to 0.0.1

package.json

 {
-	"name": "aesthetic",
-	"description": "HTML5 User Interface Components",
-	"author": "Trevor Parscal <[e-mail]>",
-	"license": "MIT",
-	"version": "0.0.0",
-	"repository": {
-		"type": "git",
-		"url": "https://github.com/trevorparscal/aesthetic"
-	},
-	"bugs": {
-		"url": "https://github.com/trevorparscal/aesthetic/issues"
-	},
-	"keywords": [
-		"html5",
-		"ui"
-	],
-	"dependencies": {
-		"jquery": "^2.1.4",
-		"oojs": "^1.1.7"
-	}
+  "name": "aesthetic",
+  "version": "0.0.1",
+  "description": "Supports a range of styling options for React components.",
+  "keywords": [
+    "aesthetic",
+    "react",
+    "styles"
+  ],
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/milesj/aesthetic.git"
+  },
+  "license": "MIT",
+  "main": "./lib/index.js",
+  "dependencies": {
+    "babel-runtime": "^6.18.0",
+    "hoist-non-react-statics": "^1.2.0",
+    "lodash.merge": "^4.6.0"
+  },
+  "peerDependencies": {
+    "react": "^15.0.0"
+  }
 }

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Major refactor

Supply chain risk

Package has recently undergone a major refactor. It may be unstable or indicate significant internal changes. Use caution when updating to versions that include significant changes.

Found 1 instance in 1 package

New author

Supply chain risk

A new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.

Found 1 instance in 1 package

No contributors or author data

Maintenance

Package does not specify a list of contributors or an author in package.json.

Found 1 instance in 1 package

No bug tracker

Maintenance

Package does not have a linked bug tracker in package.json.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Empty package

Supply chain risk

Package does not contain any code. It may be removed, is name squatting, or the result of a faulty package publish.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

13972

increased by783.19%

Number of package files

11

increased by10%

Lines of code

414

increased byInfinity%

Worsened metrics

Dependency count

4

increased by100%

Number of low maintenance alerts

2

increased by100%

Number of lines in readme file

2

decreased by-50%

Number of medium supply chain risk alerts

2

increased by100%

Dependency changes

• + Addedbabel-runtime@^6.18.0

• + Addedhoist-non-react-statics@^1.2.0

• + Addedlodash.merge@^4.6.0

• + Addedasap@2.0.6(transitive)

• + Addedbabel-runtime@6.26.0(transitive)

• + Addedcore-js@1.2.72.6.12(transitive)

• + Addedcreate-react-class@15.7.0(transitive)

• + Addedencoding@0.1.13(transitive)

• + Addedfbjs@0.8.18(transitive)

• + Addedhoist-non-react-statics@1.2.0(transitive)

• + Addediconv-lite@0.6.3(transitive)

• + Addedis-stream@1.1.0(transitive)

• + Addedisomorphic-fetch@2.2.1(transitive)

• + Addedjs-tokens@4.0.0(transitive)

• + Addedlodash.merge@4.6.2(transitive)

• + Addedloose-envify@1.4.0(transitive)

• + Addednode-fetch@1.7.3(transitive)

• + Addedobject-assign@4.1.1(transitive)

• + Addedpromise@7.3.1(transitive)

• + Addedprop-types@15.8.1(transitive)

• + Addedreact@15.7.0(transitive)

• + Addedreact-is@16.13.1(transitive)

• + Addedregenerator-runtime@0.11.1(transitive)

• + Addedsafer-buffer@2.1.2(transitive)

• + Addedsetimmediate@1.0.5(transitive)

• + Addedua-parser-js@0.7.39(transitive)

• + Addedwhatwg-fetch@3.6.20(transitive)

• - Removedjquery@^2.1.4

• - Removedoojs@^1.1.7

• - Removedjquery@2.2.4(transitive)

• - Removedoojs@1.1.10(transitive)