babel-plugin-react-emoji-a11y - npm Package Compare versions

Comparing version 0.0.1-security to 0.1.0

package.json

 {
-  "name": "babel-plugin-react-emoji-a11y ",
-  "version": "0.0.1-security",
-  "description": "security holding package",
-  "repository": "npm/security-holder",
-  "dependencies": {}
+  "name": "babel-plugin-react-emoji-a11y",
+  "version": "0.1.0",
+  "description": "A babel plugin that will take any emojis not wrapped in <span> and wrap them, with correct a11y attributes",
+  "main": "index.js",
+  "scripts": {
+    "test": "jest",
+    "test:watch": "jest --watch"
+  },
+  "keywords": [
+    "emoji",
+    "span",
+    "wrapper",
+    "babel",
+    "plugin",
+    "babel-plugin"
+  ],
+  "author": "Anthony Frehner",
+  "license": "ISC",
+  "devDependencies": {
+    "babel-core": "^6.26.3",
+    "husky": "^3.1.0",
+    "jest": "^24.9.0",
+    "prettier": "^1.19.1",
+    "pretty-quick": "^1.11.1"
+  },
+  "dependencies": {
+    "babel-plugin-syntax-jsx": "^6.18.0",
+    "emoji-regex": "^8.0.0",
+    "gemoji": "^4.2.1"
+  },
+  "husky": {
+    "hooks": {
+      "pre-commit": "pretty-quick --staged"
+    }
+  }
 }

README.md

@@ -1,9 +0,7 @@
-# Security holding package
+# babel-plugin-react-emoji-a11y
 
-This package name is not currently in use, but was formerly occupied
-by another package. To avoid malicious use, npm is hanging on to the
-package name, but loosely, and we'll probably give it to you if you
-want it.
+A heavy-handed babel plugin for React that forces your emojis to be accessible by wrapping them in `<span role="img" aria-label="{label}">`. The goal is that developers will be warned where their code isn't accessible (so that they can fix it), while also forcing the code to be accessible behind the scenes.
 
-You may adopt this package by contacting [e-mail] and
-requesting the name.
+## How to use
+
+(coming)

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Major refactor

Supply chain risk

Package has recently undergone a major refactor. It may be unstable or indicate significant internal changes. Use caution when updating to versions that include significant changes.

Found 1 instance in 1 package

New author

Supply chain risk

A new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.

Found 1 instance in 1 package

No repository

Supply chain risk

Package does not have a linked source code repository. Without this field, a package will have no reference to the location of the source code use to generate the package.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Known malware

Supply chain risk

This package is malware. We have asked the package registry to remove it.

Found 1 instance in 1 package

Empty package

Supply chain risk

Package does not contain any code. It may be removed, is name squatting, or the result of a faulty package publish.

Found 1 instance in 1 package

Manifest confusion

Supply chain risk

This package has inconsistent metadata. This could be malicious or caused by an error when publishing the package.

Found 1 instance in 1 package

No contributors or author data

Maintenance

Package does not specify a list of contributors or an author in package.json.

Found 1 instance in 1 package

No License Found

License

(Experimental) License information could not be found.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

10231

increased by1898.24%

Number of package files

6

increased by200%

Number of low license alerts

0

decreased by-100%

Lines of code

191

increased byInfinity%

Number of low maintenance alerts

2

decreased by-33.33%

Number of critical supply chain risk alerts

0

decreased by-100%

Worsened metrics

Dependency count

3

increased byInfinity%

Dev dependency count

5

increased byInfinity%

Number of lines in readme file

8

decreased by-20%

Dependency changes

• + Addedbabel-plugin-syntax-jsx@^6.18.0

• + Addedemoji-regex@^8.0.0

• + Addedgemoji@^4.2.1

• + Addedbabel-plugin-syntax-jsx@6.18.0(transitive)

• + Addedemoji-regex@8.0.0(transitive)

• + Addedgemoji@4.2.1(transitive)