async - npm Package Compare versions

Comparing version 0.1.17 to 0.1.18

package.json

@@ -5,3 +5,3 @@ { "name": "async"
 , "author": "Caolan McMahon"
-, "version": "0.1.17"
+, "version": "0.1.18"
 , "repository" :
@@ -17,14 +17,7 @@ { "type" : "git"
   ]
-, "dependencies":
-  { "uglify-js": "1.2.x"
-  }
 , "devDependencies":
-    { "nodeunit": ">0.0.0"
-    , "nodelint": ">0.0.0"
-    }
-, "scripts":
-  { "preinstall": "make clean"
-  , "install": "make build"
-  , "test": "make test"
+  { "nodeunit": ">0.0.0"
+  , "uglify-js": "1.2.x"
+  , "nodelint": ">0.0.0"
   }
 }

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Install scripts

Supply chain risk

Install scripts are run when the package is installed. The majority of malware in npm is hidden in install scripts.

Found 2 instances in 1 package

Major refactor

Supply chain risk

Package has recently undergone a major refactor. It may be unstable or indicate significant internal changes. Use caution when updating to versions that include significant changes.

Found 1 instance in 1 package

Improved metrics

Dependency count

0

decreased by-100%

Number of high supply chain risk alerts

0

decreased by-100%

Number of medium supply chain risk alerts

0

decreased by-100%

Worsened metrics

Total package byte prevSize

55971

decreased by-0.23%

Dev dependency count

3

increased by50%

Dependency changes

• - Removeduglify-js@1.2.x

• - Removeduglify-js@1.2.6(transitive)