Comparing version 0.1.0 to 1.0.0
{ | ||
"author": "Dr Nic Williams <drnicwilliams@gmail.com>", | ||
"author": "Engine Yard (http://www.engineyard.com)", | ||
"contributors": [ | ||
"Dr Nic Williams <drnicwilliams@gmail.com>", | ||
"Ryan Souza <rsouza@engineyard.com>" | ||
], | ||
"name": "ey_config", | ||
"keywords": ["engineyard", "ey"], | ||
"description": "Access to additional services for Engine Yard customers.", | ||
"version": "0.1.0", | ||
"homepage": "https://github.com/engineyard/ey_config_nodejs", | ||
"version": "1.0.0", | ||
"homepage": "https://github.com/engineyard/ey_config.node", | ||
"repository": { | ||
"type": "git", | ||
"url": "git://github.com/engineyard/ey_config_nodejs.git" | ||
"url": "git://github.com/engineyard/ey_config.node.git" | ||
}, | ||
"main": "ey_config.js", | ||
"engines": { | ||
"node": "0.6.1" | ||
}, | ||
"dependencies": {}, | ||
"devDependencies": {} | ||
"main": "./lib/ey_config.js", | ||
"devDependencies": { "mocha": "1.X", "coffee-script": "1.X" }, | ||
"scripts": { "test": "mocha --compilers coffee:coffee-script" } | ||
} |
New author
Supply chain riskA new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.
Found 1 instance in 1 package
Filesystem access
Supply chain riskAccesses the file system, and could potentially read sensitive data.
Found 1 instance in 1 package
Empty package
Supply chain riskPackage does not contain any code. It may be removed, is name squatting, or the result of a faulty package publish.
Found 1 instance in 1 package
No v1
QualityPackage is not semver >=1. This means it is not stable and does not support ^ ranges.
Found 1 instance in 1 package
No website
QualityPackage does not have a website.
Found 1 instance in 1 package
2942
4
36
0
44
2
1