clarinet - npm Package Compare versions

Comparing version 0.3.5 to 0.4.0

package.json

@@ -1,8 +0,23 @@
-{ "name" : "clarinet"
-, "description": "Evented streaming JSON parser in JavaScript"
-, "author" : "Nuno Job <[e-mail]> (http://nunojob.com/)"
-, "version" : "0.3.5"
-, "main" : "lib/clarinet.js"
-, "homepage": "https://github.com/dscape/clarinet"
-, "repository": "git://github.com/dscape/clarinet.git"
+{ "name"        : "clarinet"
+, "description" : 
+  "SAX-Like evented streaming JSON parser in JavaScript browser and node"
+, "author"      : "Nuno Job <[e-mail]> (http://nunojob.com/)"
+, "version"     : "0.4.0"
+, "main"        : "./clarinet.js"
+, "homepage"    : "https://github.com/dscape/clarinet"
+, "repository"  : 
+  { "type"      : "git"
+  , "url"       : "http://github.com/dscape/clarinet.git"
+  }
+, "bugs"        : "http://github.com/dscape/clarinet/issues"
+, "keywords"    : 
+  ["sax", "json", "parser", "stream", "streaming", "event"
+  , "events", "emitter", "async", "streamer"]
+, "devDependencies" : 
+  { "mocha": "0.3.6", "should": "0.3.2", "underscore": "1.2.3" }
+, "scripts"     :
+  { "test"      :
+    "./node_modules/mocha/bin/mocha -r should -t 10000 -s 2000  test/clarinet.js test/npm.js"
+  }
+, "engines"         : { "node": ">=0.3.6" }
 }

README.md

@@ -0,1 +1,4 @@
+
+
+
 # sax js
@@ -2,0 +5,0 @@

samples/stream.js

 var fs            = require('fs')
-  , sax           = require('../lib/clarinet.js')
+  , sax           = require('../clarinet.js')
   , parse_stream  = sax.createStream()
@@ -4,0 +4,0 @@ ;

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Major refactor

Supply chain risk

Package has recently undergone a major refactor. It may be unstable or indicate significant internal changes. Use caution when updating to versions that include significant changes.

Found 1 instance in 1 package

Dynamic require

Supply chain risk

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 1 instance in 1 package

No bug tracker

Maintenance

Package does not have a linked bug tracker in package.json.

Found 1 instance in 1 package

No repository

Supply chain risk

Package does not have a linked source code repository. Without this field, a package will have no reference to the location of the source code use to generate the package.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

11758087

increased by28.31%

Number of package files

16

increased by23.08%

Lines of code

4830

increased by229.69%

Number of lines in readme file

217

increased by1.4%

Worsened metrics

Dev dependency count

3

increased byInfinity%

Number of low supply chain risk alerts

10

increased by100%

Number of medium supply chain risk alerts

1

increased byInfinity%

No dependency changes