apostrophe - npm Package Compare versions

Comparing version 0.4.54 to 0.4.55

package.json

 {
   "name": "apostrophe",
-  "version": "0.4.54",
+  "version": "0.4.55",
   "description": "Apostrophe is a user-friendly content management system. This core module of Apostrophe provides rich content editing and essential facilities to integrate Apostrophe into your Express project. Apostrophe also includes simple facilities for storing your rich content areas in MongoDB and fetching them back again. Additional functionality is available in modules like apostrophe-pages, apostrophe-snippets, apostrophe-blog, apostrophe-events, apostrophe-twitter and apostrophe-rss.",
   "main": "apostrophe.js",
+  "//": "temporarily using a fork of less-middleware with safe dependencies",
   "dependencies": {
@@ -15,3 +16,3 @@ "async": "~0.1.22",
     "validator": "~0.4.19",
-    "less-middleware": "~0.1.9",
+    "less-middleware": "https://github.com/punkave/less.js-middleware/tarball/master",
     "hash_file": "0.0.8",
@@ -63,2 +64,2 @@ "moment": "~2.0.0",
   "license": "MIT"
-}
+}

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

HTTP dependency

Supply chain risk

Contains a dependency which resolves to a remote HTTP URL which could be used to inject untrusted code and reduce overall package reliability.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

4439493

Worsened metrics

Number of high supply chain risk alerts

1

increased byInfinity%

Published versions last week

0

decreased by-100%

Dependency changes

• - Removedclean-css@2.0.8(transitive)

• - Removedcommander@2.0.0(transitive)

• - Removedis@0.3.0(transitive)

• - Removedless@1.6.3(transitive)

• - Removedless-middleware@0.1.15(transitive)

• - Removedmime@1.2.11(transitive)

• - Removedmkdirp@0.3.5(transitive)

• - Removednode.extend@1.0.10(transitive)

• Updatedless-middleware@https://github.com/punkave/less.js-middleware/tarball/master