homebridge-plugin-govee - npm Package Compare versions

Comparing version 1.1.6 to 1.2.3

package.json

 {
   "displayName": "Homebridge Govee Thermometer Hygrometer",
   "name": "homebridge-plugin-govee",
-  "version": "1.1.6",
+  "version": "1.2.3",
   "description": "Homebridge plugin for Govee H5xxx Bluetooth Thermometer Hygrometer.",
@@ -42,3 +42,3 @@ "license": "Apache-2.0",
     "@abandonware/noble": "1.9.2-15",
-    "govee-bt-client": "1.0.13"
+    "govee-bt-client": "https://github.com/asednev/govee-bt-client.git#beta"
   },
@@ -45,0 +45,0 @@ "devDependencies": {

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

HTTP dependency

Supply chain risk

Contains a dependency which resolves to a remote HTTP URL which could be used to inject untrusted code and reduce overall package reliability.

Found 1 instance in 1 package

Manifest confusion

Supply chain risk

This package has inconsistent metadata. This could be malicious or caused by an error when publishing the package.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

354309

increased by0.01%

Worsened metrics

Number of high supply chain risk alerts

1

increased byInfinity%

Number of medium supply chain risk alerts

1

increased byInfinity%

Dependency changes

• + Addednode-addon-api@8.3.0(transitive)

• - Removedgovee-bt-client@1.0.13(transitive)

• - Removednode-addon-api@8.2.2(transitive)

• - Removedtypescript@4.9.5(transitive)

• Updatedgovee-bt-client@https://github.com/asednev/govee-bt-client.git#beta