blog - npm Package Compare versions
Comparing version 0.0.3 to 1.0.0
@@ -1,21 +0,12 @@ | ||
| { "name": "blog" | ||
| , "author" : "Thom Blake <thethomblake@gmail.com> (http://thomblake.com)" | ||
| , "description" : "My blog" | ||
| , "keywords" : [ "nserver", "blog" ] | ||
| , "version" : "0.0.3" | ||
| , "repository" : | ||
| { "type" : "git" | ||
| , "url" : "https://github.com/thomblake/blog.git" | ||
| } | ||
| , "bugs" : | ||
| { "web" : "http://github.com/thomblake/blog/issues" | ||
| } | ||
| , "directories" : | ||
| { "lib" : "./lib" | ||
| } | ||
| , "dependencies" : | ||
| { "yajet" : "*" | ||
| , "nserver-util" : "*" | ||
| , "github-flavored-markdown" : "*" | ||
| } | ||
| { | ||
| "name": "blog", | ||
| "version": "1.0.0", | ||
| "description": "", | ||
| "main": "index.js", | ||
| "scripts": { | ||
| "test": "echo \"Error: no test specified\" && exit 1" | ||
| }, | ||
| "keywords": [], | ||
| "author": "", | ||
| "license": "ISC" | ||
| } |
@@ -1,5 +0,2 @@ | ||
| ## thomblake/blog ## | ||
| Simultaneously containing the engine for my blog and the actual blog content. | ||
| Created by [Thom Blake](https://github.com/thomblake). | ||
| I've just started development on this node module. When i'm done, it will be a generic blog backend for | ||
| new users to use and try out! |
New alerts
Empty package
Supply chain riskPackage does not contain any code. It may be removed, is name squatting, or the result of a faulty package publish.
Found 1 instance in 1 package
New author
Supply chain riskA new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.
Found 1 instance in 1 package
No contributors or author data
MaintenancePackage does not specify a list of contributors or an author in package.json.
Found 1 instance in 1 package
No bug tracker
MaintenancePackage does not have a linked bug tracker in package.json.
Found 1 instance in 1 package
No repository
Supply chain riskPackage does not have a linked source code repository. Without this field, a package will have no reference to the location of the source code use to generate the package.
Found 1 instance in 1 package
No tests
QualityPackage does not have any tests. This is a strong signal of a poorly maintained or low quality package.
Found 1 instance in 1 package
Fixed alerts
Non-existent author
Supply chain riskThe package was published by an npm account that no longer exists.
Found 1 instance in 1 package
Wildcard dependency
QualityPackage has a dependency with a floating version range. This can cause issues if the dependency publishes a new major version.
Found 3 instances in 1 package
Filesystem access
Supply chain riskAccesses the file system, and could potentially read sensitive data.
Found 1 instance in 1 package
No v1
QualityPackage is not semver >=1. This means it is not stable and does not support ^ ranges.
Found 1 instance in 1 package
Improved metrics
- Dependency count
- decreased by-100%
0
- Number of medium quality alerts
- decreased by-75%
1
- Number of high supply chain risk alerts
- decreased by-100%
0
- Number of low supply chain risk alerts
- decreased by-50%
1
Worsened metrics
- Total package byte prevSize
- decreased by-93.52%
354
- Number of package files
- decreased by-85.71%
2
- Lines of code
- decreased by-100%
0
- Number of low maintenance alerts
- increased by50%
3
- Number of lines in readme file
- decreased by-50%
3
- Number of medium supply chain risk alerts
- increased byInfinity%
2
Dependency changes
- Removedgithub-flavored-markdown@*
- Removednserver-util@*
- Removedyajet@*
- Removedgithub-flavored-markdown@1.0.1(transitive)
- Removednserver-util@0.0.1(transitive)
- Removedyajet@0.0.0(transitive)