bal-util - npm Package Compare versions

Comparing version 1.5.0 to 1.6.0

package.json

 {
 	"name": "bal-util",
-	"version": "1.5.0",
+	"version": "1.6.0",
 	"description": "Common utility functions for Node.js used and maintained by Benjamin Lupton",
@@ -21,12 +21,12 @@ "homepage": "https://github.com/balupton/bal-util",
 	],
-    "author": "Benjamin Lupton <[e-mail]> (http://balupton.com)",
-    "maintainers": [
-        "Benjamin Lupton <[e-mail]> (http://balupton.com)"
-    ],
-    "contributors": [
-        "Benjamin Lupton <[e-mail]> (http://balupton.com)"
-    ],
-    "bugs": {
-        "url": "https://github.com/balupton/bal-util/issues"
-    },
+	"author": "Benjamin Lupton <[e-mail]> (http://balupton.com)",
+	"maintainers": [
+		"Benjamin Lupton <[e-mail]> (http://balupton.com)"
+	],
+	"contributors": [
+		"Benjamin Lupton <[e-mail]> (http://balupton.com)"
+	],
+	"bugs": {
+		"url": "https://github.com/balupton/bal-util/issues"
+	},
 	"repository" : {
@@ -40,6 +40,6 @@ "type": "git",
 	"dependencies": {
-		"request": "2.9.x",
-		"coffee-script": "1.3.x"
+		"request": "2.9.x"
 	},
 	"devDependencies": {
+		"coffee-script": "1.3.x",
 		"docco": "0.3.x",
@@ -54,3 +54,3 @@ "mocha": "1.0.x"
 	},
-	"main": "./main.js"
+	"main": "./lib/balutil"
 }

New alerts

Major refactor

Supply chain risk

Package has recently undergone a major refactor. It may be unstable or indicate significant internal changes. Use caution when updating to versions that include significant changes.

Found 1 instance in 1 package

No README

Quality

Package does not have a README. This may indicate a failed publish or a low quality package.

Found 1 instance in 1 package

Shell access

Supply chain risk

This module accesses the system shell. Accessing the system shell increases the risk of executing arbitrary code.

Found 1 instance in 1 package

Dynamic require

Supply chain risk

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

Found 1 instance in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

Fixed alerts

Dynamic require

Supply chain risk

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

Found 1 instance in 1 package

Improved metrics

Dependency count

1

decreased by-50%

Lines of code

1448

increased by682.7%

Worsened metrics

Total package byte prevSize

51275

decreased by-84.41%

Dev dependency count

3

increased by50%

Number of package files

10

decreased by-64.29%

Number of medium quality alerts

1

increased byInfinity%

Number of lines in readme file

0

decreased by-100%

Number of low supply chain risk alerts

11

increased by1000%

Number of medium supply chain risk alerts

3

increased byInfinity%

Dependency changes

• - Removedcoffee-script@1.3.x

• - Removedcoffee-script@1.3.3(transitive)