flow-parser-bin - npm Package Compare versions

Comparing version 0.0.0 to 0.63.1

package.json

 {
   "name": "flow-parser-bin",
-  "version": "0.0.0",
-  "description": "",
+  "version": "0.63.1",
+  "description": "The Flow JavaScript parser, via bindings to the native OCaml implementation",
   "main": "index.js",
+  "repository": "https://github.com/facebook/flow.git",
+  "author": "Marshall Roch <[e-mail]>",
+  "license": "MIT",
+  "dependencies": {
+    "bindings": "^1.3.0",
+    "nan": "^2.8.0"
+  },
   "scripts": {
-    "test": "echo \"Error: no test specified\" && exit 1"
+    "prepublish": "make all",
+    "verify": "shasum -c SHASUM256.txt"
   },
-  "author": "Marshall Roch <[e-mail]>",
-  "license": "MIT"
+  "files": [
+    "lib",
+    "include",
+    "src",
+    "index.js",
+    "binding.gyp",
+    "SHASUM256.txt"
+  ],
+  "os": ["darwin", "linux"],
+  "cpu": ["x64"]
 }

New alerts

Native code

Supply chain risk

Contains native code (e.g., compiled binaries or shared libraries). Including native code can obscure malicious behavior.

Found 1 instance in 1 package

Trivial Package

Supply chain risk

Packages less than 10 lines of code are easily copied into your own project and may not warrant the additional supply chain risk of an external dependency.

Found 1 instance in 1 package

Fixed alerts

Empty package

Supply chain risk

Package does not contain any code. It may be removed, is name squatting, or the result of a faulty package publish.

Found 1 instance in 1 package

No repository

Supply chain risk

Package does not have a linked source code repository. Without this field, a package will have no reference to the location of the source code use to generate the package.

Found 1 instance in 1 package

No tests

Quality

Package does not have any tests. This is a strong signal of a poorly maintained or low quality package.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

8248353

increased by3451093.72%

Number of package files

14

increased by1300%

Lines of code

9

increased byInfinity%

Number of low quality alerts

2

decreased by-33.33%

Worsened metrics

Dependency count

2

increased byInfinity%

Number of medium supply chain risk alerts

4

increased by300%

Dependency changes

• + Addedbindings@^1.3.0

• + Addednan@^2.8.0

• + Addedbindings@1.5.0(transitive)

• + Addedfile-uri-to-path@1.0.0(transitive)

• + Addednan@2.22.0(transitive)