lemon-module-stage - npm Package Compare versions

Comparing version 0.1.42 to 0.1.43

package.json

 {
   "name": "lemon-module-stage",
-  "version": "0.1.42",
+  "version": "0.1.43",
   "private": false,
@@ -13,3 +13,3 @@ "scripts": {
     "h5-component": "git+ssh://[e-mail]:ning-chen/h5-component.git#v6.0.0",
-    "ux-component": "git+ssh://[e-mail]:ning-chen/ux-component.git#v3.0.4",
+    "ux-component": "git+ssh://[e-mail]:ning-chen/ux-component.git#v3.0.5",
     "vue-aria": "git+ssh://[e-mail]:fe/vue-aria.git#0.0.2"
@@ -16,0 +16,0 @@ },

New alerts

Git dependency

Supply chain risk

Contains a dependency which resolves to a remote git URL. Dependencies fetched from git URLs are not immutable can be used to inject untrusted code or reduce the likelihood of a reproducible install.

Found 1 instance in 1 package

Fixed alerts

Git dependency

Supply chain risk

Contains a dependency which resolves to a remote git URL. Dependencies fetched from git URLs are not immutable can be used to inject untrusted code or reduce the likelihood of a reproducible install.

Found 1 instance in 1 package

Worsened metrics

Total package byte prevSize

1459223

decreased by-0.12%

Lines of code

1375

decreased by-0.15%

Dependency changes

• Updatedux-component@git+ssh://[e-mail]:ning-chen/ux-component.git#v3.0.5