conventional-recommended-bump - npm Package Compare versions

Comparing version 1.0.0 to 1.0.1

CHANGELOG.md

@@ -0,1 +1,9 @@
+# Change Log
+
+All notable changes to this project will be documented in this file.
+See [standard-version](https://github.com/conventional-changelog/standard-version) for commit guidelines.
+
+<a name="1.0.1"></a>
+## [1.0.1](https://github.com/conventional-changelog/conventional-recommended-bump/compare/conventional-recommended-bump@1.0.0...conventional-recommended-bump@1.0.1) (2017-07-17)
+
 <a name="0.3.0"></a>
@@ -85,5 +93,1 @@ # [0.3.0](https://github.com/conventional-changelog/conventional-recommended-bump/compare/v0.2.1...v0.3.0) (2016-08-13)
 ## 0.0.1 (2015-06-22)
-
-
-
-

package.json

 {
   "name": "conventional-recommended-bump",
-  "version": "1.0.0",
+  "version": "1.0.1",
   "description": "Get a recommended version bump based on conventional commits",
@@ -13,2 +13,7 @@ "homepage": "https://github.com/conventional-changelog/conventional-recommended-bump",
   "license": "MIT",
+  "files": [
+    "index.js",
+    "cli.js",
+    "presets"
+  ],
   "keywords": [
@@ -23,4 +28,4 @@ "conventional-recommended-bump",
     "conventional-commits-filter": "^1.0.0",
-    "conventional-commits-parser": "^1.0.1",
-    "git-semver-tags": "^1.2.0",
+    "conventional-commits-parser": "^2.0.0",
+    "git-semver-tags": "^1.2.1",
     "git-raw-commits": "^1.2.0",
@@ -27,0 +32,0 @@ "meow": "^3.3.0",

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

New author

Supply chain risk

A new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.

Found 1 instance in 1 package

Shell access

Supply chain risk

This module accesses the system shell. Accessing the system shell increases the risk of executing arbitrary code.

Found 1 instance in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

Improved metrics

Number of low supply chain risk alerts

3

decreased by-40%

Number of medium supply chain risk alerts

0

decreased by-100%

Worsened metrics

Total package byte prevSize

14291

decreased by-41.07%

Number of package files

6

decreased by-75%

Lines of code

176

decreased by-63.71%

Dependency changes

• + Addedconventional-commits-parser@2.1.7(transitive)

• - Removedconventional-commits-parser@1.3.0(transitive)

• Updatedconventional-commits-parser@^2.0.0

• Updatedgit-semver-tags@^1.2.1