create-ko - npm Package Compare versions

Comparing version 1.0.2-beta.1 to 1.0.2

package.json

 {
   "name": "create-ko",
-  "version": "1.0.2-beta.1",
+  "version": "1.0.2",
   "description": "create react project with ko",
@@ -18,5 +18,2 @@ "repository": {
   ],
-  "scripts": {
-    "build": "tsc"
-  },
   "author": "",
@@ -30,3 +27,7 @@ "license": "ISC",
     "@types/inquirer": "^8.2.2"
-  }
-}
+  },
+  "scripts": {
+    "build": "tsc"
+  },
+  "readme": "<div align=\"center\">\n\n <img src=\"https://user-images.githubusercontent.com/38368040/236159944-0bed65be-adef-4173-9274-01cc447d5ce6.svg\" width=\"20%\" height=\"20%\" alt=\"watchman-logo\" />\n <h1>ko</h1>\n <h3>Simple, yet powerful, tool for managing your react applications</h3>\n\n</div>\n\n# create-ko\n\nThis package is the global command for creating [ko](https://github.com/DTStack/ko) application.\n\n<br />\n\nPlease refer to ko's document:\n\n* [Introduction](https://dtstack.github.io/ko/docs/current/introduction)\n* [Getting Started](https://dtstack.github.io/ko/docs/current/getting-started)\n* [FAQ](https://dtstack.github.io/ko/docs/current/FAQ)"
+}

template/package.json

@@ -23,5 +23,5 @@ {
         "typescript": "^5.0.2",
-        "ko": "6.6.0-beta.0",
+        "ko": "^6.5.2",
         "ko-lint-config": "^2.2.19"
     }
 }

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

New author

Supply chain risk

A new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 1 instance in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

No v1

Quality

Package is not semver >=1. This means it is not stable and does not support ^ ranges.

Found 1 instance in 1 package

Improved metrics

Number of low quality alerts

1

decreased by-50%

Number of low supply chain risk alerts

0

decreased by-100%

Worsened metrics

Total package byte prevSize

29875

decreased by-14.73%

Number of package files

16

decreased by-5.88%

Lines of code

220

decreased by-41.18%

Number of medium supply chain risk alerts

2

increased by100%

No dependency changes