eox - npm Package Compare versions

Comparing version 0.3.0 to 1.0.0

package.json

 {
   "name": "eox",
-  "version": "0.3.0",
-  "description": "Eox",
+  "version": "1.0.0",
+  "description": "",
   "main": "index.js",
   "scripts": {
-    "test": "mocha --compilers coffee:coffee-script/register -R spec -u bdd",
-    "build": "rm -rf dist; coffee --compile --output dist --watch src",
-    "start": "(npm run build &); nodemon --watch dist -e js ./dist/example.js"
+    "test": "echo \"Error: no test specified\" && exit 1"
   },
   "repository": {
     "type": "git",
-    "url": "git+https://github.com/103057/eox.git"
+    "url": "git+https://github.com/npm/deprecate-holder.git"
   },
-  "author": "Ion Suman",
-  "license": "MIT",
+  "author": "",
+  "license": "ISC",
   "bugs": {
-    "url": "https://github.com/103057/eox/issues"
+    "url": "https://github.com/npm/deprecate-holder/issues"
   },
-  "homepage": "https://github.com/103057/eox#readme",
-  "dependencies": {
-    "coffee-script": "^1.12.5",
-    "cson-parser": "^1.3.5",
-    "lodash": "^4.17.4"
-  },
-  "devDependencies": {
-    "chai": "^3.5.0",
-    "mocha": "^3.2.0",
-    "mock-fs": "^4.2.0"
-  }
+  "homepage": "https://github.com/npm/deprecate-holder#readme"
 }

README.md

@@ -0,2 +1,5 @@
+# Deprecated Package
 
-# Eox
+This package is no longer supported and has been deprecated. To avoid malicious use, npm is hanging on to the package name.
+
+Please contact [e-mail] if you have questions about this package.

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Empty package

Supply chain risk

Package does not contain any code. It may be removed, is name squatting, or the result of a faulty package publish.

Found 1 instance in 1 package

New author

Supply chain risk

A new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.

Found 1 instance in 1 package

No contributors or author data

Maintenance

Package does not specify a list of contributors or an author in package.json.

Found 1 instance in 1 package

No tests

Quality

Package does not have any tests. This is a strong signal of a poorly maintained or low quality package.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

No bug tracker

Maintenance

Package does not have a linked bug tracker in package.json.

Found 1 instance in 1 package

No v1

Quality

Package is not semver >=1. This means it is not stable and does not support ^ ranges.

Found 1 instance in 1 package

No website

Quality

Package does not have a website.

Found 1 instance in 1 package

Improved metrics

Dependency count

0

decreased by-100%

Dev dependency count

0

decreased by-100%

Number of low quality alerts

1

decreased by-50%

Number of lines in readme file

6

increased by100%

Number of low supply chain risk alerts

0

decreased by-100%

Worsened metrics

Total package byte prevSize

665

decreased by-86.38%

Number of package files

2

decreased by-81.82%

Lines of code

0

decreased by-100%

Number of medium supply chain risk alerts

2

increased byInfinity%

Dependency changes

• - Removedcoffee-script@^1.12.5

• - Removedcson-parser@^1.3.5

• - Removedlodash@^4.17.4

• - Removedcoffee-script@1.12.7(transitive)

• - Removedcson-parser@1.3.5(transitive)

• - Removedlodash@4.17.21(transitive)