bourbon - npm Package Compare versions

Comparing version 4.2.1 to 4.2.2

package.json

 {
   "name": "bourbon",
-  "version": "4.2.1",
+  "version": "4.2.2",
   "description": "A simple and lightweight mixin library for Sass.",
@@ -5,0 +5,0 @@ "keywords": [

README.md

@@ -18,2 +18,5 @@ [![Bourbon](http://images.thoughtbot.com/bourbon/bourbon-logo.svg)](http://bourbon.io)
 
+Follow the [@bourbonsass](https://twitter.com/bourbonsass) Twitter account
+for updates.
+
 ## Requirements
@@ -120,10 +123,20 @@
 
-## Credits
+## License
 
-[![thoughtbot](http://images.thoughtbot.com/bourbon/thoughtbot-logo.svg)](http://thoughtbot.com)
+Copyright © 2011–2015 [thoughtbot, inc](http://thoughtbot.com).
+Bourbon is free software,
+and may be redistributed under the terms specified in the [license](LICENSE.md).
 
-Bourbon is maintained and funded by [thoughtbot, inc](http://thoughtbot.com). Tweet your questions or suggestions to [@bourbonsass](https://twitter.com/bourbonsass) and while you’re at it follow us too.
+## About thoughtbot
 
-## License
+[![thoughtbot](http://thoughtbot.github.io/images/signature.svg)][hire]
 
-Copyright © 2011–2015 [thoughtbot, inc](http://thoughtbot.com). Bourbon is free software, and may be redistributed under the terms specified in the [license](LICENSE.md).
+Bourbon is maintained and funded by thoughtbot, inc.
+The names and logos for thoughtbot are trademarks of thoughtbot, inc.
+
+We love open source software!
+See [our other projects][community] or
+[hire us][hire] to design, develop, and grow your product.
+
+[community]: https://thoughtbot.com/community?utm_source=github
+[hire]: https://thoughtbot.com/hire-us?utm_source=github

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

New author

Supply chain risk

A new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.

Found 1 instance in 1 package

Improved metrics

Number of lines in readme file

141

increased by10.16%

Number of medium supply chain risk alerts

1

decreased by-50%

Worsened metrics

Total package byte prevSize

139117

decreased by-86.93%

Number of package files

85

decreased by-51.98%

No dependency changes