famous-carousel - npm Package Compare versions

Comparing version 0.9.4 to 0.9.5

CHANGELOG.md

@@ -0,0 +0,0 @@ v0.9.0 - June 25, 2015

dist/es5/Carousel.js

@@ -0,0 +0,0 @@ /**

dist/es5/Pager.js

@@ -0,0 +0,0 @@ /**

example/data/data.json

@@ -0,0 +0,0 @@ [

example/index.js

@@ -0,0 +0,0 @@ /**

example/requireExample.js

@@ -0,0 +0,0 @@ /**

package.json

 {
 	"name": "famous-carousel",
-	"version": "0.9.4",
+	"version": "0.9.5",
 	"author": "Peace Chen",
@@ -51,4 +51,4 @@ "contributors": ["Tony Alves (https://github.com/talves)"],
 	"dependencies": {
-		"famous": "git://github.com/Famous/engine#v0.7.0"
+		"famous": "git://github.com/peacechen/engine#af98b6c"
 	}
 }

README.md

@@ -0,0 +0,0 @@ ## Famo.us Carousel

src/Carousel.js

@@ -5,6 +5,7 @@ /**
 
+import {core} from "famous";
 import {Arrow} from "./Arrow";
 import {Pager} from "./Pager";
 import {Dots} from "./Dots";
-import FamousEngine from "famous/core/FamousEngine";
+var FamousEngine = core.FamousEngine;
 
@@ -11,0 +12,0 @@ export class Carousel {

src/Pager.js

@@ -0,0 +0,0 @@ /**

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Git dependency

Supply chain risk

Contains a dependency which resolves to a remote git URL. Dependencies fetched from git URLs are not immutable can be used to inject untrusted code or reduce the likelihood of a reproducible install.

Found 1 instance in 1 package

Manifest confusion

Supply chain risk

This package has inconsistent metadata. This could be malicious or caused by an error when publishing the package.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Git dependency

Supply chain risk

Contains a dependency which resolves to a remote git URL. Dependencies fetched from git URLs are not immutable can be used to inject untrusted code or reduce the likelihood of a reproducible install.

Found 1 instance in 1 package

Manifest confusion

Supply chain risk

This package has inconsistent metadata. This could be malicious or caused by an error when publishing the package.

Found 1 instance in 1 package

Improved metrics

Lines of code

1424

increased by0.07%

Worsened metrics

Total package byte prevSize

70975

decreased by-1.51%

Dependency changes

• Updatedfamous@git://github.com/peacechen/engine#af98b6c