Comparing version 1.0.6 to 1.0.7
{ | ||
"name": "hac", | ||
"version": "1.0.6", | ||
"version": "1.0.7", | ||
"description": "Hierarchical agglomerative clustering", | ||
@@ -28,11 +28,11 @@ "main": "index.js", | ||
"dependencies": { | ||
"bin-tree": "git+https://git@github.com/roackb2/bin-tree.git", | ||
"bin-tree": "roackb2/bin-tree", | ||
"es6-shim": "^0.34.1", | ||
"feature-selector": "git+https://git@github.com/roackb2/feature-selector.git", | ||
"heap": "git+https://git@github.com/roackb2/heap.git", | ||
"feature-selector": "roackb2/feature-selector", | ||
"heap": "roackb2/heap", | ||
"lodash": "^3.10.1", | ||
"natural": "^0.2.0", | ||
"node-uuid": "^1.4.2", | ||
"stringify": "git+https://github.com/roackb2/stringify.git" | ||
"stringify": "roackb2/stringify" | ||
} | ||
} |
@@ -158,2 +158,3 @@ # HAC | ||
* 1.0.7: update url of modules hosted on github to a simpler form | ||
* 1.0.6: correct require path of the heap module | ||
@@ -160,0 +161,0 @@ * 1.0.5: make statements in README for incompatibility with `Tonic` |
GitHub dependency
Supply chain riskContains a dependency which resolves to a GitHub URL. Dependencies fetched from GitHub specifiers are not immutable can be used to inject untrusted code or reduce the likelihood of a reproducible install.
Found 4 instances in 1 package
Manifest confusion
Supply chain riskThis package has inconsistent metadata. This could be malicious or caused by an error when publishing the package.
Found 4 instances in 1 package
Git dependency
Supply chain riskContains a dependency which resolves to a remote git URL. Dependencies fetched from git URLs are not immutable and can be used to inject untrusted code or reduce the likelihood of a reproducible install.
Found 4 instances in 1 package
9
165
22881
4
Updatedbin-tree@roackb2/bin-tree
Updatedheap@roackb2/heap
Updatedstringify@roackb2/stringify