bitcore-mnemonic - npm Package Compare versions

Comparing version 0.0.4 to 0.9.0

bower.json

 {
   "name": "bitcore-mnemonic",
   "main": "./bitcore-mnemonic.min.js",
-  "version": "0.0.5",
+  "version": "0.9.0",
   "homepage": "https://github.com/bitpay/bitcore-mnemonic",
@@ -6,0 +6,0 @@ "authors": [

package.json

 {
   "name": "bitcore-mnemonic",
-  "version": "0.0.4",
+  "version": "0.9.0",
   "description": "BIP39 Mnemonics implemented for Bitcore.",
@@ -34,11 +34,11 @@ "author": "BitPay <[e-mail]>",
     "assert": "^1.1.2",
+    "bitcore-build": "^0.5.0",
     "brfs": "^1.2.0",
     "chai": "^1.10.0",
-    "gulp": "^3.8.10",
-    "bitcore-build": "^0.4.0"
+    "gulp": "^3.8.10"
   },
   "dependencies": {
-    "bitcore": "git://github.com/bitpay/bitcore",
+    "bitcore": "^0.9.0",
     "lodash": "^2.4.1"
   }
 }

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

New author

Supply chain risk

A new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Git dependency

Supply chain risk

Contains a dependency which resolves to a remote git URL. Dependencies fetched from git URLs are not immutable can be used to inject untrusted code or reduce the likelihood of a reproducible install.

Found 1 instance in 1 package

Improved metrics

Number of high supply chain risk alerts

0

decreased by-100%

Worsened metrics

Total package byte prevSize

117495

decreased by-0.02%

Number of medium supply chain risk alerts

1

increased byInfinity%

Dependency changes

• + Addedbitcore@0.9.5(transitive)

• Updatedbitcore@^0.9.0