grape-web - npm Package Compare versions

Comparing version 0.20.0 to 0.20.1

package.json

 {
   "name": "grape-web",
-  "version": "0.20.0",
+  "version": "0.20.1",
   "dependencies": {
-    "html5-desktop-notifications": "^1.0.0",
+    "html5-desktop-notifications": "ubergrape/HTML5-Desktop-Notifications",
     "jss": "^3.3.0",
@@ -7,0 +7,0 @@ "jss-camel-case": "^1.0.1",

New alerts

GitHub dependency

Supply chain risk

Contains a dependency which resolves to a GitHub URL. Dependencies fetched from GitHub specifiers are not immutable can be used to inject untrusted code or reduce the likelihood of a reproducible install.

Found 1 instance in 1 package

Manifest confusion

Supply chain risk

This package has inconsistent metadata. This could be malicious or caused by an error when publishing the package.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

98125

increased by0.13%

Worsened metrics

Number of high supply chain risk alerts

1

increased byInfinity%

Number of medium supply chain risk alerts

1

increased byInfinity%

Dependency changes

• - Removedhtml5-desktop-notifications@1.0.0(transitive)

• Updatedhtml5-desktop-notifications@ubergrape/HTML5-Desktop-Notifications