assetgraph - npm Package Compare versions

Comparing version 0.3.13 to 0.3.14

package.json

@@ -5,3 +5,3 @@ {
     "repository": "git://github.com/One-com/assetgraph.git",
-    "version": "0.3.13",
+    "version": "0.3.14",
     "maintainers": [
@@ -28,3 +28,3 @@ {
         "coffee-script": "= 1.1.2",
-        "jsdom": "= 0.2.7",
+        "jsdom": "= 0.2.9",
         "cssom-papandreou": "= 0.2.0-patch1"
@@ -31,0 +31,0 @@ },

New alerts

New author

Supply chain risk

A new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.

Found 1 instance in 1 package

Fixed alerts

Non-existent author

Supply chain risk

The package was published by an npm account that no longer exists.

Found 1 instance in 1 package

Improved metrics

Number of high supply chain risk alerts

0

decreased by-100%

Worsened metrics

Number of medium supply chain risk alerts

6

increased by20%

Dependency changes

• Updatedjsdom@= 0.2.9