bitcore - npm Package Compare versions

Comparing version 5.0.0-beta.40 to 5.0.0-beta.41

package.json

 {
   "name": "bitcore",
-  "version": "5.0.0-beta.40",
+  "version": "5.0.0-beta.41",
   "description": "A platform to build bitcoin and blockchain-based applications.",
@@ -40,5 +40,5 @@ "engines": {
     "bitcore-lib": "5.0.0-beta.1",
-    "bitcore-node": "5.0.0-beta.40",
-    "insight-api": "5.0.0-beta.40",
-    "insight-ui": "bitpay/insight#v5.0.0-beta.40"
+    "bitcore-node": "5.0.0-beta.41",
+    "insight-api": "5.0.0-beta.41",
+    "insight-ui": "bitpay/insight#v5.0.0-beta.41"
   },
@@ -45,0 +45,0 @@ "license": "MIT",

New alerts

GitHub dependency

Supply chain risk

Contains a dependency which resolves to a GitHub URL. Dependencies fetched from GitHub specifiers are not immutable can be used to inject untrusted code or reduce the likelihood of a reproducible install.

Found 1 instance in 1 package

Manifest confusion

Supply chain risk

This package has inconsistent metadata. This could be malicious or caused by an error when publishing the package.

Found 1 instance in 1 package

Fixed alerts

GitHub dependency

Supply chain risk

Contains a dependency which resolves to a GitHub URL. Dependencies fetched from GitHub specifiers are not immutable can be used to inject untrusted code or reduce the likelihood of a reproducible install.

Found 1 instance in 1 package

Manifest confusion

Supply chain risk

This package has inconsistent metadata. This could be malicious or caused by an error when publishing the package.

Found 1 instance in 1 package

Worsened metrics

Total package byte prevSize

38500

decreased by-0.32%

Number of package files

26

decreased by-3.7%

Dependency changes

• + Addedbitcore-node@5.0.0-beta.41(transitive)

• + Addedinsight-api@5.0.0-beta.41(transitive)

• - Removedbitcore-node@5.0.0-beta.40(transitive)

• - Removedinsight-api@5.0.0-beta.40(transitive)

• Updatedbitcore-node@5.0.0-beta.41

• Updatedinsight-api@5.0.0-beta.41

• Updatedinsight-ui@bitpay/insight#v5.0.0-beta.41