lz-node-utils - npm Package Compare versions

Comparing version 0.1.7 to 0.1.8

package.json

 {
   "name": "lz-node-utils",
-  "version": "0.1.7",
+  "version": "0.1.8",
   "description": "Useful utility functions for node.",
@@ -12,3 +12,3 @@ "main": "lib/util.js",
     "underscore": "^1.7.0",
-    "yaml-front-matter": "^3.2.3"
+    "yaml-front-matter": "lzilioli/js-yaml-front-matter#182516d"
   },
@@ -15,0 +15,0 @@ "devDependencies": {

README.md

@@ -79,2 +79,3 @@ lz-node-utils
 - v0.1.6 - `util.loadAppSettings` now behaves as expected with nested objects
-- v0.1.7 - upgrade to latest `yaml-front-matter` (with my [pull request](https://github.com/dworthen/js-yaml-front-matter/pull/1)!)
+- v0.1.7 ~~upgrade to latest `yaml-front-matter` (with my [pull request](https://github.com/dworthen/js-yaml-front-matter/pull/1)!)~~
+- v0.1.8 Use my fork of `js-yaml-front-matter`, which npm installs cleanly.

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

GitHub dependency

Supply chain risk

Contains a dependency which resolves to a GitHub URL. Dependencies fetched from GitHub specifiers are not immutable can be used to inject untrusted code or reduce the likelihood of a reproducible install.

Found 1 instance in 1 package

Manifest confusion

Supply chain risk

This package has inconsistent metadata. This could be malicious or caused by an error when publishing the package.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

20974

increased by0.52%

Number of lines in readme file

81

increased by1.25%

Worsened metrics

Number of high supply chain risk alerts

1

increased byInfinity%

Number of medium supply chain risk alerts

1

increased byInfinity%

Dependency changes

• - Removedcommander@1.0.0(transitive)

• - Removedyaml-front-matter@3.4.1(transitive)

• Updatedyaml-front-matter@lzilioli/js-yaml-front-matter#182516d