cord - npm Package Compare versions

Comparing version 1.0.0 to 1.0.1

package.json

@@ -1,11 +0,15 @@
-{     "author" : "ELLIOTTCABLE (http://ell.io/tt)"
-   
-,       "name" : "cord"
-,    "version" : "1.0.0"
-,    "license" : "MIT"
-, "repository" :{"type":"git", "url":"git://github.com/ELLIOTTCABLE/cord.git"}
-   
-,       "main" : "lib/cord.js"
-   
-,       "engines" :{"node":"~0.10.10"}
-,  "dependencies" :{"lodash":"~1.2.1"} }
+{
+  "name": "cord",
+  "description": "React components for Cord",
+  "version": "1.0.1",
+  "homepage": "https://docs.cord.com/",
+  "license": "MIT",
+  "files": [
+    "README.md"
+  ],
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/getcord/cord-sdk.git",
+    "directory": "packages/react"
+  }
+}

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Empty package

Supply chain risk

Package does not contain any code. It may be removed, is name squatting, or the result of a faulty package publish.

Found 1 instance in 1 package

Major refactor

Supply chain risk

Package has recently undergone a major refactor. It may be unstable or indicate significant internal changes. Use caution when updating to versions that include significant changes.

Found 1 instance in 1 package

New author

Supply chain risk

A new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.

Found 1 instance in 1 package

No contributors or author data

Maintenance

Package does not specify a list of contributors or an author in package.json.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

No website

Quality

Package does not have a website.

Found 1 instance in 1 package

Improved metrics

Dependency count

0

decreased by-100%

Worsened metrics

Total package byte prevSize

562

decreased by-98.15%

Number of package files

2

decreased by-81.82%

Lines of code

0

decreased by-100%

Number of low maintenance alerts

2

increased by100%

Number of lines in readme file

6

decreased by-91.78%

Number of medium supply chain risk alerts

3

increased byInfinity%

Dependency changes

• - Removedlodash@~1.2.1

• - Removedlodash@1.2.1(transitive)