hubot-slack - npm Package Compare versions

Comparing version 4.0.0 to 4.0.1

CHANGELOG.md

 # [slack-hubot] Changelog
 
-### v4.0.0 (2016-06-15)
+### v4.0.1 (2016-07-19)
+  * Usernames with `-` and `.` no longer borked
+  * You could craft a bot that would crash Hubot by simply having it send a message. Wow! That got fixed.
 
+### v4.0.0 (2016-07-15)
+
   * Now uses the latest version of `node-slack-sdk` (v3.4.1 as of this writing), inheriting all the improvements therein.
@@ -15,2 +19,2 @@ * Better (and automatically enabled) reconnect logic. As in, it actually reconnects automatically at all.
   * Total refactoring of the functionality, exposing a slightly different interface. So watch out for that.
-  * You can now access the underlying Slack client directly, for when you really need low-level functionality therein.
+  * You can now access the underlying Slack client directly, for when you really need low-level functionality therein.

package.json

 {
   "name": "hubot-slack",
-  "version": "4.0.0",
+  "version": "4.0.1",
   "description": "A Slack adapter for hubot",
@@ -5,0 +5,0 @@ "main": "./slack",

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Major refactor

Supply chain risk

Package has recently undergone a major refactor. It may be unstable or indicate significant internal changes. Use caution when updating to versions that include significant changes.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Empty package

Supply chain risk

Package does not contain any code. It may be removed, is name squatting, or the result of a faulty package publish.

Found 1 instance in 1 package

New author

Supply chain risk

A new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

213872

increased by52.17%

Number of package files

37

increased by94.74%

Lines of code

1141

increased byInfinity%

Number of medium supply chain risk alerts

1

decreased by-50%

Worsened metrics

Number of low supply chain risk alerts

2

increased byInfinity%

No dependency changes