assetgraph-sprite - npm Package Compare versions

Comparing version 0.2.0 to 0.2.1

package.json

@@ -5,3 +5,3 @@ {
     "repository": "git://github.com/One-com/assetgraph-sprite.git",
-    "version": "0.2.0",
+    "version": "0.2.1",
     "maintainers": [
@@ -13,10 +13,10 @@ {
     ],
-    "publicationConfig": {
+    "publishConfig": {
         "registry": "http://registry.npmjs.org/"
     },
     "dependencies": {
-        "underscore": ">= 1.1.3",
-        "bufferjs": "= 1.0.1",
-        "canvas": "~ 0.7.0",
-        "seq": ">= 0.3.0 < 0.4"
+        "underscore": "= 1.2.0",
+        "bufferjs": "= 1.0.2",
+        "canvas": "= 0.7.3",
+        "seq": "= 0.3.5"
     },
@@ -23,0 +23,0 @@ "devDependencies": {

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

New author

Supply chain risk

A new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Non-existent author

Supply chain risk

The package was published by an npm account that no longer exists.

Found 1 instance in 1 package

Improved metrics

Number of high supply chain risk alerts

0

decreased by-100%

Worsened metrics

Total package byte prevSize

28595

decreased by-0.04%

Number of medium supply chain risk alerts

1

increased byInfinity%

Dependency changes

• - Removedcanvas@0.7.3(transitive)

• - Removedchainsaw@0.0.9(transitive)

• - Removedhashish@0.0.4(transitive)

• - Removedseq@0.3.5(transitive)

• - Removedtraverse@0.3.9(transitive)

• - Removedunderscore@1.13.7(transitive)

• Updatedbufferjs@= 1.0.2

• Updatedcanvas@= 0.7.3

• Updatedseq@= 0.3.5

• Updatedunderscore@= 1.2.0