liquid-node - npm Package Compare versions

Comparing version 0.0.2 to 0.0.3

package.json

@@ -8,3 +8,3 @@ {
   "description": "Node.js port of Tobias Lütke's Liquid template engine.",
-  "version": "0.0.2",
+  "version": "0.0.3",
   "homepage": "https://github.com/sirlantis/liquid-node",
@@ -22,3 +22,3 @@ "bugs": "https://github.com/sirlantis/liquid-node/issues",
   "dependencies": {
-    "coffee-script": "git://github.com/jashkenas/coffee-script.git",
+    "coffee-script": "1.4.x",
     "underscore": ">=1.2.3"
@@ -25,0 +25,0 @@ },

New alerts

Empty package

Supply chain risk

Package does not contain any code. It may be removed, is name squatting, or the result of a faulty package publish.

Found 1 instance in 1 package

Major refactor

Supply chain risk

Package has recently undergone a major refactor. It may be unstable or indicate significant internal changes. Use caution when updating to versions that include significant changes.

Found 1 instance in 1 package

Fixed alerts

Git dependency

Supply chain risk

Contains a dependency which resolves to a remote git URL. Dependencies fetched from git URLs are not immutable and can be used to inject untrusted code or reduce the likelihood of a reproducible install.

Found 1 instance in 1 package

Improved metrics

Number of lines in readme file

140

increased by35.92%

Number of high supply chain risk alerts

1

decreased by-50%

Worsened metrics

Total package byte prevSize

67478

decreased by-48.06%

Number of package files

37

decreased by-38.33%

Lines of code

0

decreased by-100%

Number of medium supply chain risk alerts

2

increased byInfinity%

Dependency changes

• + Addedcoffee-script@1.4.0(transitive)

• Updatedcoffee-script@1.4.x