lzma - npm Package Compare versions

Comparing version 1.1.0 to 1.2.0

package.json

 {
-    "name": "lzma",
-    "version": "1.1.0",
-    "description": "A standalone JavaScript implementation of the Lempel-Ziv-Markov chain (LZMA) compression algorithm",
-    "homepage": "https://github.com/nmrugg/LZMA-JS",
-    "author": "Nathan Rugg <[e-mail]>",
-    "keywords": ["lzma", "compression", "decompression"]
-}
+  "author": "Nathan Rugg <[e-mail]>",
+  "name": "lzma",
+  "description": "A standalone JavaScript implementation of the Lempel-Ziv-Markov chain (LZMA) compression algorithm",
+  "version": "1.2.0",
+  "homepage": "https://github.com/nmrugg/LZMA-JS",
+  "repository": {
+    "type": "git",
+    "url": "git://github.com/nmrugg/LZMA-JS.git"
+  },
+  "main": "lzma.js"
+}

New alerts

Major refactor

Supply chain risk

Package has recently undergone a major refactor. It may be unstable or indicate significant internal changes. Use caution when updating to versions that include significant changes.

Found 1 instance in 1 package

No README

Quality

Package does not have a README. This may indicate a failed publish or a low quality package.

Found 1 instance in 1 package

Fixed alerts

Major refactor

Supply chain risk

Package has recently undergone a major refactor. It may be unstable or indicate significant internal changes. Use caution when updating to versions that include significant changes.

Found 1 instance in 1 package

New author

Supply chain risk

A new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.

Found 1 instance in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

No repository

Supply chain risk

Package does not have a linked source code repository. Without this field, a package will have no reference to the location of the source code use to generate the package.

Found 1 instance in 1 package

Improved metrics

Number of low supply chain risk alerts

1

decreased by-66.67%

Number of medium supply chain risk alerts

1

decreased by-50%

Worsened metrics

Total package byte prevSize

130303

decreased by-26.71%

Number of package files

4

decreased by-73.33%

Lines of code

3601

decreased by-9.75%

Number of medium quality alerts

1

increased byInfinity%

Number of lines in readme file

0

decreased by-100%

No dependency changes