escape-html - npm Package Compare versions

Comparing version 0.0.1 to 1.0.0

component.json

 {
   "name": "escape-html",
   "description": "Escape HTML entities",
-  "version": "0.0.1",
+  "version": "1.0.0",
   "keywords": ["escape", "html", "utility"],
@@ -10,2 +10,2 @@ "dependencies": {},
   ]
-}
+}

index.js

@@ -1,2 +0,1 @@
-
 /**
@@ -14,4 +13,5 @@ * Escape special characters in the given string of html.
     .replace(/"/g, '"')
+    .replace(/'/g, ''')
     .replace(/</g, '&lt;')
     .replace(/>/g, '&gt;');
-}
+}

package.json

 {
   "name": "escape-html",
   "description": "Escape HTML entities",
-  "version": "0.0.1",
+  "version": "1.0.0",
   "keywords": ["escape", "html", "utility"],
   "dependencies": {},
-  "main": "index.js"
-}
+  "main": "index.js",
+  "component": {
+    "scripts": {
+      "escape-html/index.js": "index.js"
+    }
+  }
+}

New alerts

New author

Supply chain risk

A new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.

Found 1 instance in 1 package

Fixed alerts

Non-existent author

Supply chain risk

The package was published by an npm account that no longer exists.

Found 1 instance in 1 package

No v1

Quality

Package is not semver >=1. This means it is not stable and does not support ^ ranges.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

1074

increased by12.11%

Lines of code

25

increased by13.64%

Number of low quality alerts

2

decreased by-33.33%

Number of high supply chain risk alerts

0

decreased by-100%

Worsened metrics

Number of medium supply chain risk alerts

1

increased byInfinity%

No dependency changes