lesshint - npm Package Compare versions
Comparing version 1.5.1 to 1.5.2
| # Changelog | ||
| ## 1.5.2 (2016-03-31) | ||
| * Changed `gonzales-pe` full URL to GitHub pattern. ([e83e665](https://github.com/lesshint/lesshint/commit/e83e665f36e8beba0976b9ee32ad478067a117e5)) | ||
| ## 1.5.1 (2016-03-29) | ||
@@ -3,0 +6,0 @@ * Fixed an issue where `zeroUnit` would crash in certain cases. ([34606cc](https://github.com/lesshint/lesshint/commit/34606cc78963be33e988c1061d404f53e1b26d19)) |
| { | ||
| "name": "lesshint", | ||
| "description": "A tool to aid you in writing clean and consistent Less.", | ||
| "version": "1.5.1", | ||
| "version": "1.5.2", | ||
| "main": "./lib/lesshint.js", | ||
@@ -23,3 +23,3 @@ "author": { | ||
| "exit": "^0.1.2", | ||
| "gonzales-pe": "git://github.com/gilt/gonzales-pe.git#dev", | ||
| "gonzales-pe": "gilt/gonzales-pe#dev", | ||
| "lodash.findindex": "^4.0.1", | ||
@@ -26,0 +26,0 @@ "lodash.merge": "^4.0.1", |
| # lesshint | ||
| [](https://www.npmjs.com/package/lesshint) | ||
| [](https://travis-ci.org/lesshint/lesshint) | ||
| [](https://ci.appveyor.com/project/jwilsson/lesshint/branch/master) | ||
| [](https://ci.appveyor.com/project/jwilsson/lesshint/branch/master) | ||
| [](https://coveralls.io/r/lesshint/lesshint?branch=master) | ||
@@ -6,0 +6,0 @@ [](https://david-dm.org/lesshint/lesshint) |
New alerts
License Policy Violation
LicenseThis package is not allowed per your license policy. Review the package's license to ensure compliance.
Found 1 instance in 1 package
GitHub dependency
Supply chain riskContains a dependency which resolves to a GitHub URL. Dependencies fetched from GitHub specifiers are not immutable can be used to inject untrusted code or reduce the likelihood of a reproducible install.
Found 1 instance in 1 package
Manifest confusion
Supply chain riskThis package has inconsistent metadata. This could be malicious or caused by an error when publishing the package.
Found 1 instance in 1 package
Fixed alerts
License Policy Violation
LicenseThis package is not allowed per your license policy. Review the package's license to ensure compliance.
Found 1 instance in 1 package
Git dependency
Supply chain riskContains a dependency which resolves to a remote git URL. Dependencies fetched from git URLs are not immutable can be used to inject untrusted code or reduce the likelihood of a reproducible install.
Found 1 instance in 1 package
Improved metrics
- Total package byte prevSize
- increased by0.04%
347077
Worsened metrics
- Number of medium supply chain risk alerts
- increased byInfinity%
1