groq - npm Package Compare versions

Comparing version 1.149.0 to 1.149.16-canary.35

package.json

 {
   "name": "groq",
-  "version": "1.149.0",
+  "version": "1.149.16-canary.35+ee9a1b4e4",
   "description": "Tagged template literal for Sanity.io GROQ-queries",
@@ -39,3 +39,3 @@ "main": "lib/groq.js",
   "homepage": "https://www.sanity.io/",
-  "gitHead": "a8e0a50ffb60756d5057788d95aaee012e8a00e6"
+  "gitHead": "ee9a1b4e44c8199a3febed70c50495e387bc863c"
 }

New alerts

Manifest confusion

Supply chain risk

This package has inconsistent metadata. This could be malicious or caused by an error when publishing the package.

Found 1 instance in 1 package

No v1

Quality

Package is not semver >=1. This means it is not stable and does not support ^ ranges.

Found 1 instance in 1 package

Fixed alerts

New author

Supply chain risk

A new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

4338

increased by0.49%

Worsened metrics

Number of low quality alerts

1

increased byInfinity%

No dependency changes