kss-bootstrap - npm Package Compare versions

Comparing version 0.4.6 to 0.4.7

package.json

 {
   "name": "kss-bootstrap",
-  "version": "0.4.6",
+  "version": "0.4.7",
   "description": "A KSS template and style guide for Bootstrap.",
@@ -31,3 +31,3 @@ "author": "Rob Loach (http://github.com/robloach)",
   "dependencies": {
-    "kss": "~2.1.0"
+    "kss": "git://github.com/RobLoach/kss-node.git#xdemo"
   },
@@ -34,0 +34,0 @@ "scripts": {

New alerts

Git dependency

Supply chain risk

Contains a dependency which resolves to a remote git URL. Dependencies fetched from git URLs are not immutable and can be used to inject untrusted code or reduce the likelihood of a reproducible install.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

104370

increased by0.04%

Worsened metrics

Number of high supply chain risk alerts

1

increased byInfinity%

Dependency changes

• - Removedansi-regex@2.1.1(transitive)

• - Removedapparatus@0.0.10(transitive)

• - Removedbalanced-match@1.0.2(transitive)

• - Removedbrace-expansion@1.1.11(transitive)

• - Removedcamelcase@2.1.1(transitive)

• - Removedcliui@3.2.0(transitive)

• - Removedcode-point-at@1.1.0(transitive)

• - Removedconcat-map@0.0.1(transitive)

• - Removeddecamelize@1.2.0(transitive)

• - Removedglob@6.0.4(transitive)

• - Removedhandlebars@4.7.8(transitive)

• - Removedinflight@1.0.6(transitive)

• - Removedinherits@2.0.4(transitive)

• - Removedinvert-kv@1.0.0(transitive)

• - Removedis-fullwidth-code-point@1.0.0(transitive)

• - Removedkss@2.1.1(transitive)

• - Removedlcid@1.0.0(transitive)

• - Removedmarked@0.3.19(transitive)

• - Removedminimatch@3.1.2(transitive)

• - Removedminimist@1.2.8(transitive)

• - Removednatural@0.2.1(transitive)

• - Removedneo-async@2.6.2(transitive)

• - Removednumber-is-nan@1.0.1(transitive)

• - Removedonce@1.4.0(transitive)

• - Removedos-locale@1.4.0(transitive)

• - Removedpath-is-absolute@1.0.1(transitive)

• - Removedsource-map@0.6.1(transitive)

• - Removedstring-width@1.0.2(transitive)

• - Removedstrip-ansi@3.0.1(transitive)

• - Removedsylvester@0.0.21(transitive)

• - Removeduglify-js@3.19.3(transitive)

• - Removedunderscore@1.13.7(transitive)

• - Removedwindow-size@0.1.4(transitive)

• - Removedwordwrap@1.0.0(transitive)

• - Removedwrap-ansi@2.1.0(transitive)

• - Removedwrappy@1.0.2(transitive)

• - Removedwrench@1.5.9(transitive)

• - Removedy18n@3.2.2(transitive)

• - Removedyargs@3.32.0(transitive)

• Updatedkss@git://github.com/RobLoach/kss-node.git#xdemo