halfpenny - npm Package Compare versions

Comparing version 0.0.2 to 0.0.3

package.json

 {
   "name": "halfpenny",
-  "version": "0.0.2",
+  "version": "0.0.3",
   "description": "Official javascript COINS API client. Nodejs and Browser compatible!",
-  "main": "index.js",
+  "main": "build/halfpenny.bundle.js",
   "scripts": {
@@ -12,4 +12,5 @@ "test": "echo 'run integration tests in nodeapi'",
     "publish-major": "npm run preversion && npm version major && git push origin master --tags && npm publish",
-    "lint": "jshint .",
-    "validate": "npm ls"
+    "lint": "grunt lint",
+    "validate": "npm ls",
+    "postinstall": "grunt build"
   },
@@ -27,7 +28,21 @@ "repository": {
   "devDependencies": {
-    "precommit-hook": "^3.0.0"
+    "babel-core": "^6.3.21",
+    "babel-loader": "^6.2.0",
+    "babel-plugin-transform-runtime": "^6.3.13",
+    "babel-preset-es2015": "^6.3.13",
+    "coins-grunt-env": "^1.0.2",
+    "grunt": "^0.4.5",
+    "grunt-contrib-jshint": "^0.11.3",
+    "grunt-env": "^0.4.4",
+    "grunt-exec": "^0.4.6",
+    "grunt-jscs": "^2.3.0",
+    "load-grunt-config": "^0.19.0",
+    "load-grunt-tasks": "^3.3.0",
+    "precommit-hook": "^3.0.0",
+    "time-grunt": "^1.2.2",
+    "webpack": "^1.12.4"
   },
   "dependencies": {
     "btoa": "^1.1.2",
-    "dom-storage": "^2.0.1",
+    "dom-storage": "^2.0.2",
     "es6-object-assign": "^1.0.1",
@@ -34,0 +49,0 @@ "hawk": "^4.0.0",

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Install scripts

Supply chain risk

Install scripts are run when the package is installed. The majority of malware in npm is hidden in install scripts.

Found 1 instance in 1 package

Major refactor

Supply chain risk

Package has recently undergone a major refactor. It may be unstable or indicate significant internal changes. Use caution when updating to versions that include significant changes.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Improved metrics

Number of package files

21

increased by75%

Worsened metrics

Total package byte prevSize

22377

decreased by-14.97%

Dev dependency count

15

increased by1400%

Lines of code

536

decreased by-6.29%

Number of high supply chain risk alerts

1

increased byInfinity%

Number of low supply chain risk alerts

1

increased byInfinity%

Number of medium supply chain risk alerts

1

increased byInfinity%

Dependency changes

• Updateddom-storage@^2.0.2