bson - npm Package Compare versions

Comparing version 0.0.1 to 0.0.2

package.json

 {
   "name": "bson",
-  "version": "0.0.1",
+  "version": "0.0.2",
+  "repository": {
+	"type": "git",
+	"url": "https://[e-mail]/0ctave/node-bson.git"
+  },
   "description": "BSON library for node",
   "author": "Christian Amor Kvalheim <[e-mail]>",
   "contributors" :  [ "Yuriy Bogdanov <[e-mail]>" ],
-  "main": "bson.node",
-  "engines": { "node": ">=0.4.0" },
-  "scripts": { "install" : "node-waf configure clean build" }
+  "scripts": { "install" : "make all" },
+  "main": "./bson.node",
+  "engines": { "node": ">=0.4.0" }
 }

New alerts

Install scripts

Supply chain risk

Install scripts are run when the package is installed. The majority of malware in npm is hidden in install scripts.

Found 1 instance in 1 package

Fixed alerts

Install scripts

Supply chain risk

Install scripts are run when the package is installed. The majority of malware in npm is hidden in install scripts.

Found 1 instance in 1 package

Native code

Supply chain risk

Contains native code (e.g., compiled binaries or shared libraries). Including native code can obscure malicious behavior.

Found 8 instances in 1 package

No repository

Supply chain risk

Package does not have a linked source code repository. Without this field, a package will have no reference to the location of the source code use to generate the package.

Found 1 instance in 1 package

Improved metrics

Number of low supply chain risk alerts

1

decreased by-50%

Number of medium supply chain risk alerts

0

decreased by-100%

Worsened metrics

Total package byte prevSize

183171

decreased by-87.95%

Number of package files

27

decreased by-22.86%

No dependency changes