concatenate - npm Package Compare versions

Comparing version 0.0.1 to 0.0.2

history.md

 
+0.0.2 / 2017-01-22
+==================
+
+  * Point the 'globs' dependency to NPM instead of github
+  * add repo to package.json
+
 0.0.1 / 2013-04-29
@@ -3,0 +9,0 @@ ==================

package.json

 {
   "name": "concatenate",
-  "version": "0.0.1",
+  "version": "0.0.2",
   "description": "concatenate files",
   "keywords": [],
   "author": "Stephen Mathieson <[e-mail]>",
+  "repository": {
+    "type": "git",
+    "url": "git://github.com/stephenmathieson/node-concatenate.git"
+  },
   "dependencies": {
-    "globs": "git://github.com/stephenmathieson/node-globs.git#master"
+    "globs": "^0.1.2"
   },
@@ -10,0 +14,0 @@ "devDependencies": {

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Git dependency

Supply chain risk

Contains a dependency which resolves to a remote git URL. Dependencies fetched from git URLs are not immutable and can be used to inject untrusted code or reduce the likelihood of a reproducible install.

Found 1 instance in 1 package

No repository

Supply chain risk

Package does not have a linked source code repository. Without this field, a package will have no reference to the location of the source code use to generate the package.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

5408

increased by3.6%

Number of high supply chain risk alerts

0

decreased by-100%

Number of low supply chain risk alerts

2

decreased by-33.33%

Dependency changes

• + Addedbalanced-match@1.0.2(transitive)

• + Addedbrace-expansion@1.1.11(transitive)

• + Addedconcat-map@0.0.1(transitive)

• + Addedfs.realpath@1.0.0(transitive)

• + Addedglob@7.2.3(transitive)

• + Addedglobs@0.1.4(transitive)

• + Addedinflight@1.0.6(transitive)

• + Addedinherits@2.0.4(transitive)

• + Addedminimatch@3.1.2(transitive)

• + Addedonce@1.4.0(transitive)

• + Addedpath-is-absolute@1.0.1(transitive)

• + Addedwrappy@1.0.2(transitive)

• Updatedglobs@^0.1.2