fh-sync - npm Package Compare versions

Comparing version 1.0.0-RC1 to 1.0.0

package.json

 {
   "name": "fh-sync",
-  "version": "1.0.0-RC1",
+  "version": "1.0.0",
   "description": "JSON data syncronisation server",
@@ -19,3 +19,2 @@ "main": "lib/index.js",
   "devDependencies": {
-    "jsdoc": "^3.4.3",
     "grunt": "^0.4.5",
@@ -33,3 +32,2 @@ "grunt-cli": "^1.2.0",
   "scripts": {
-    "docs": "./node_modules/.bin/jsdoc -d docs/api ./lib",
     "pretest": "./scripts/pretest.sh",
@@ -36,0 +34,0 @@ "test": "grunt fh:unit mochaTest:integration",

README.md

@@ -40,6 +40,2 @@ # fh-sync
 
-## Documentation
-
-See [Documentation folder](./docs)
-
 ## Tests
@@ -46,0 +42,0 @@ In order to run the tests, please make sure you have [Docker](https://www.docker.com/) installed.

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 2 instances in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Native code

Supply chain risk

Contains native code (e.g., compiled binaries or shared libraries). Including native code can obscure malicious behavior.

Found 1 instance in 1 package

Major refactor

Supply chain risk

Package has recently undergone a major refactor. It may be unstable or indicate significant internal changes. Use caution when updating to versions that include significant changes.

Found 1 instance in 1 package

New author

Supply chain risk

A new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.

Found 1 instance in 1 package

No v1

Quality

Package is not semver >=1. This means it is not stable and does not support ^ ranges.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

260853

increased by29.28%

Dev dependency count

10

decreased by-9.09%

Number of package files

63

increased by53.66%

Lines of code

6451

increased by34.76%

Number of low quality alerts

1

decreased by-50%

Number of medium supply chain risk alerts

0

decreased by-100%

Worsened metrics

Number of lines in readme file

52

decreased by-7.14%

Number of low supply chain risk alerts

5

increased by66.67%

No dependency changes