amazon-product-advertising-api - npm Package Compare versions

Comparing version 0.2.0 to 0.2.1

package.json

 {
   "name": "amazon-product-advertising-api",
-  "version": "0.2.0",
+  "version": "0.2.1",
   "description": "Node.js client for the Amazon Product Advertising API",
-  "main": "./build/amazon-product-advertising-api.js",
+  "main": ".index",
   "scripts": {
@@ -17,6 +17,2 @@ "start": "gulp build && node build/example.js",
   },
-  "repository": {
-    "type": "git",
-    "url": "https://github.com/bynaki/amazon-product-advertising-api.git"
-  },
   "engines": {
@@ -31,23 +27,3 @@ "node": ">= 6.0.0"
   "license": "MIT",
-  "typings": "./build/amazon-product-advertising-api.d.ts",
   "devDependencies": {
-    "@types/amazon-product-api": "^0.0.31",
-    "@types/chai": "^4.0.4",
-    "@types/fs-extra": "^4.0.2",
-    "@types/gulp": "^4.0.4",
-    "@types/mocha": "^2.2.39",
-    "@types/node": "^7.0.5",
-    "chai": "^4.1.2",
-    "fs-extra": "^4.0.2",
-    "gulp": "^3.9.1",
-    "gulp-logger": "0.0.2",
-    "gulp-newer": "^1.3.0",
-    "gulp-nodemon": "^2.2.1",
-    "gulp-sourcemaps": "^2.6.1",
-    "gulp-spawn-mocha": "^3.1.0",
-    "gulp-typescript": "^3.1.5",
-    "merge2": "^1.0.3",
-    "mocha": "^3.2.0",
-    "nodemon": "^1.12.1",
-    "typescript": "^2.2.1"
   },
@@ -54,0 +30,0 @@ "dependencies": {

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Major refactor

Supply chain risk

Package has recently undergone a major refactor. It may be unstable or indicate significant internal changes. Use caution when updating to versions that include significant changes.

Found 1 instance in 1 package

No repository

Supply chain risk

Package does not have a linked source code repository. Without this field, a package will have no reference to the location of the source code use to generate the package.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 3 instances in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

Improved metrics

Dev dependency count

0

decreased by-100%

Number of low supply chain risk alerts

1

decreased by-94.74%

Worsened metrics

Total package byte prevSize

64108

decreased by-37.97%

Number of package files

19

decreased by-45.71%

Lines of code

1240

decreased by-14.84%

Number of medium supply chain risk alerts

1

increased byInfinity%

No dependency changes