bootstrap-italia - npm Package Compare versions

Comparing version 0.7.1 to 0.7.2

package.json

 {
   "name": "bootstrap-italia",
-  "version": "0.7.1",
+  "version": "0.7.2",
   "keywords": [
@@ -19,4 +19,11 @@ "css",
     "documentation-serve": "bundle exec jekyll serve",
-    "documentation-deploy-to-gh-pages": "bundle exec jekyll build --config _config.yml,_config_production.yml && gh-pages -d _gh_pages",
-    "test": "echo \"Error: no test specified\" && exit 1"
+    "documentation-deploy-to-gh-pages": "bundle exec jekyll build --config _config.yml,_config_production.yml && gh-pages -d _gh_pages -m 'Update documentation [ci skip]'",
+    "release": "node scripts/release",
+    "bump-major": "npm version major -m \"Release %s\"",
+    "bump-minor": "npm version minor -m \"Release %s\"",
+    "bump-patch": "npm version patch -m \"Release %s\"",
+    "preversion": "npm test",
+    "version": "node scripts/config-sync && git add _config.yml",
+    "postversion": "echo \"You can now publish your tag with 'git push --follow-tags'\"",
+    "test": "echo \"No tests specified\""
   },
@@ -38,2 +45,3 @@ "repository": "https://github.com/italia/bootstrap-italia",
   "devDependencies": {
+    "@octokit/rest": "^15.2.6",
     "babel-core": "^6.26.3",
@@ -44,2 +52,3 @@ "babel-plugin-transform-es2015-modules-strip": "^0.1.0",
     "browser-sync": "^2.24.1",
+    "conventional-changelog": "^1.1.24",
     "cross-spawn": "^6.0.5",
@@ -59,3 +68,4 @@ "fancy-log": "^1.3.2",
     "gulp-uglify": "^3.0.0",
-    "gulp-wrapper": "^1.0.0"
+    "gulp-wrapper": "^1.0.0",
+    "replace-in-file": "^3.4.0"
   },
@@ -62,0 +72,0 @@ "dependencies": {

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

No tests

Quality

Package does not have any tests. This is a strong signal of a poorly maintained or low quality package.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Native code

Supply chain risk

Contains native code (e.g., compiled binaries or shared libraries). Including native code can obscure malicious behavior.

Found 6 instances in 1 package

No tests

Quality

Package does not have any tests. This is a strong signal of a poorly maintained or low quality package.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

3924723

increased by61.81%

Number of package files

68

increased by1.49%

Lines of code

11628

increased by192.45%

Number of medium supply chain risk alerts

8

decreased by-42.86%

Worsened metrics

Dev dependency count

23

increased by15%

No dependency changes