famous-carousel - npm Package Compare versions

Comparing version 0.9.1 to 0.9.2

package.json

 {
 	"name": "famous-carousel",
-	"version": "0.9.1",
+	"version": "0.9.2",
 	"author": "Peace Chen",
@@ -51,4 +51,4 @@ "contributors": ["Tony Alves (https://github.com/talves)"],
 	"dependencies": {
-		"famous": "git://github.com/Famous/engine#develop"
+		"famous": "git://github.com/Famous/engine#v0.7.0"
 	}
 }

README.md

@@ -0,0 +0,0 @@ ## Famo.us Carousel

src/Carousel.js

@@ -0,0 +0,0 @@ /**

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Git dependency

Supply chain risk

Contains a dependency which resolves to a remote git URL. Dependencies fetched from git URLs are not immutable can be used to inject untrusted code or reduce the likelihood of a reproducible install.

Found 1 instance in 1 package

Manifest confusion

Supply chain risk

This package has inconsistent metadata. This could be malicious or caused by an error when publishing the package.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Git dependency

Supply chain risk

Contains a dependency which resolves to a remote git URL. Dependencies fetched from git URLs are not immutable can be used to inject untrusted code or reduce the likelihood of a reproducible install.

Found 1 instance in 1 package

Major refactor

Supply chain risk

Package has recently undergone a major refactor. It may be unstable or indicate significant internal changes. Use caution when updating to versions that include significant changes.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

66551

increased by0.94%

Dependency changes

• Updatedfamous@git://github.com/Famous/engine#v0.7.0