chat-js - npm Package Compare versions

Comparing version 1.1.1 to 2.0.0

package.json

 {
   "name": "chat-js",
-  "version": "1.1.1",
-  "description": "Simple NodeJS chat server and client.",
+  "version": "2.0.0",
+  "description": "",
   "main": "index.js",
   "scripts": {
-    "test": "node chat.js -debug",
-    "start": "node chat.js"
+    "test": "echo \"Error: no test specified\" && exit 1"
   },
   "repository": {
     "type": "git",
-    "url": "git+https://github.com/luk707/ChatJS.git"
+    "url": "git+https://github.com/npm/deprecate-holder.git"
   },
-  "author": "Luke Harris",
+  "author": "",
   "license": "ISC",
   "bugs": {
-    "url": "https://github.com/luk707/ChatJS/issues"
+    "url": "https://github.com/npm/deprecate-holder/issues"
   },
-  "homepage": "https://github.com/luk707/ChatJS#readme",
-  "dependencies": {
-    "colors": "^1.1.2",
-    "express": "^4.13.4",
-    "lodash": "^4.12.0",
-    "socket.io": "^1.4.6"
-  }
+  "homepage": "https://github.com/npm/deprecate-holder#readme"
 }

README.md

@@ -1,2 +0,5 @@
-# ChatJS
-Simple NodeJS chat server and client.
+# Deprecated Package
+
+This package is no longer supported and has been deprecated. To avoid malicious use, npm is hanging on to the package name.
+
+Please contact [e-mail] if you have questions about this package.

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Empty package

Supply chain risk

Package does not contain any code. It may be removed, is name squatting, or the result of a faulty package publish.

Found 1 instance in 1 package

New author

Supply chain risk

A new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.

Found 1 instance in 1 package

No contributors or author data

Maintenance

Package does not specify a list of contributors or an author in package.json.

Found 1 instance in 1 package

No tests

Quality

Package does not have any tests. This is a strong signal of a poorly maintained or low quality package.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Network access

Supply chain risk

This module accesses the network.

Found 1 instance in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

No bug tracker

Maintenance

Package does not have a linked bug tracker in package.json.

Found 1 instance in 1 package

No website

Quality

Package does not have a website.

Found 1 instance in 1 package

Improved metrics

Dependency count

0

decreased by-100%

Number of lines in readme file

6

increased by100%

Number of low supply chain risk alerts

0

decreased by-100%

Worsened metrics

Total package byte prevSize

669

decreased by-86.48%

Number of package files

2

decreased by-66.67%

Lines of code

0

decreased by-100%

Number of medium supply chain risk alerts

2

increased by100%

Dependency changes

• - Removedcolors@^1.1.2

• - Removedexpress@^4.13.4

• - Removedlodash@^4.12.0

• - Removedsocket.io@^1.4.6

• - Removedaccepts@1.3.31.3.8(transitive)

• - Removedafter@0.8.2(transitive)

• - Removedarray-flatten@1.1.1(transitive)

• - Removedarraybuffer.slice@0.0.6(transitive)

• - Removedbacko2@1.0.2(transitive)

• - Removedbase64-arraybuffer@0.1.5(transitive)

• - Removedbase64id@1.0.0(transitive)

• - Removedbetter-assert@1.0.2(transitive)

• - Removedblob@0.0.4(transitive)

• - Removedbody-parser@1.20.3(transitive)

• - Removedbytes@3.1.2(transitive)

• - Removedcall-bind-apply-helpers@1.0.1(transitive)

• - Removedcall-bound@1.0.3(transitive)

• - Removedcallsite@1.0.0(transitive)

• - Removedcolors@1.4.0(transitive)

• - Removedcomponent-bind@1.0.0(transitive)

• - Removedcomponent-emitter@1.1.21.2.1(transitive)

• - Removedcomponent-inherit@0.0.3(transitive)

• - Removedcontent-disposition@0.5.4(transitive)

• - Removedcontent-type@1.0.5(transitive)

• - Removedcookie@0.3.10.7.1(transitive)

• - Removedcookie-signature@1.0.6(transitive)

• - Removeddebug@2.2.02.3.32.6.9(transitive)

• - Removeddepd@2.0.0(transitive)

• - Removeddestroy@1.2.0(transitive)

• - Removeddunder-proto@1.0.1(transitive)

• - Removedee-first@1.1.1(transitive)

• - Removedencodeurl@1.0.22.0.0(transitive)

• - Removedengine.io@1.8.5(transitive)

• - Removedengine.io-client@1.8.6(transitive)

• - Removedengine.io-parser@1.3.2(transitive)

• - Removedes-define-property@1.0.1(transitive)

• - Removedes-errors@1.3.0(transitive)

• - Removedes-object-atoms@1.0.0(transitive)

• - Removedescape-html@1.0.3(transitive)

• - Removedetag@1.8.1(transitive)

• - Removedexpress@4.21.2(transitive)

• - Removedfinalhandler@1.3.1(transitive)

• - Removedforwarded@0.2.0(transitive)

• - Removedfresh@0.5.2(transitive)

• - Removedfunction-bind@1.1.2(transitive)

• - Removedget-intrinsic@1.2.7(transitive)

• - Removedget-proto@1.0.1(transitive)

• - Removedgopd@1.2.0(transitive)

• - Removedhas-binary@0.1.7(transitive)

• - Removedhas-cors@1.1.0(transitive)

• - Removedhas-symbols@1.1.0(transitive)

• - Removedhasown@2.0.2(transitive)

• - Removedhttp-errors@2.0.0(transitive)

• - Removediconv-lite@0.4.24(transitive)

• - Removedindexof@0.0.1(transitive)

• - Removedinherits@2.0.4(transitive)

• - Removedipaddr.js@1.9.1(transitive)

• - Removedisarray@0.0.1(transitive)

• - Removedjson3@3.3.2(transitive)

• - Removedlodash@4.17.21(transitive)

• - Removedmath-intrinsics@1.1.0(transitive)

• - Removedmedia-typer@0.3.0(transitive)

• - Removedmerge-descriptors@1.0.3(transitive)

• - Removedmethods@1.1.2(transitive)

• - Removedmime@1.6.0(transitive)

• - Removedmime-db@1.52.0(transitive)

• - Removedmime-types@2.1.35(transitive)

• - Removedms@0.7.10.7.22.0.02.1.3(transitive)

• - Removednegotiator@0.6.10.6.3(transitive)

• - Removedobject-assign@4.1.0(transitive)

• - Removedobject-component@0.0.3(transitive)

• - Removedobject-inspect@1.13.3(transitive)

• - Removedon-finished@2.4.1(transitive)

• - Removedoptions@0.0.6(transitive)

• - Removedparsejson@0.0.3(transitive)

• - Removedparseqs@0.0.5(transitive)

• - Removedparseuri@0.0.5(transitive)

• - Removedparseurl@1.3.3(transitive)

• - Removedpath-to-regexp@0.1.12(transitive)

• - Removedproxy-addr@2.0.7(transitive)

• - Removedqs@6.13.0(transitive)

• - Removedrange-parser@1.2.1(transitive)

• - Removedraw-body@2.5.2(transitive)

• - Removedsafe-buffer@5.2.1(transitive)

• - Removedsafer-buffer@2.1.2(transitive)

• - Removedsend@0.19.0(transitive)

• - Removedserve-static@1.16.2(transitive)

• - Removedsetprototypeof@1.2.0(transitive)

• - Removedside-channel@1.1.0(transitive)

• - Removedside-channel-list@1.0.0(transitive)

• - Removedside-channel-map@1.0.1(transitive)

• - Removedside-channel-weakmap@1.0.2(transitive)

• - Removedsocket.io@1.7.4(transitive)

• - Removedsocket.io-adapter@0.5.0(transitive)

• - Removedsocket.io-client@1.7.4(transitive)

• - Removedsocket.io-parser@2.3.1(transitive)

• - Removedstatuses@2.0.1(transitive)

• - Removedto-array@0.1.4(transitive)

• - Removedtoidentifier@1.0.1(transitive)

• - Removedtype-is@1.6.18(transitive)

• - Removedultron@1.0.2(transitive)

• - Removedunpipe@1.0.0(transitive)

• - Removedutils-merge@1.0.1(transitive)

• - Removedvary@1.1.2(transitive)

• - Removedws@1.1.5(transitive)

• - Removedwtf-8@1.0.0(transitive)

• - Removedxmlhttprequest-ssl@1.6.3(transitive)

• - Removedyeast@0.1.2(transitive)