manifesto.js - npm Package Compare versions

Comparing version 2.2.1 to 2.2.2

dist/manifesto.d.ts

@@ -1,2 +0,2 @@
-// manifesto v2.2.0 https://github.com/iiif-commons/manifesto
+// manifesto v2.2.1 https://github.com/iiif-commons/manifesto
 
@@ -3,0 +3,0 @@ declare namespace Manifesto {

package.json

 {
   "name": "manifesto.js",
-  "version": "2.2.1",
+  "version": "2.2.2",
   "description": "IIIF Presentation API utility library for client and server",
   "main": "./dist/server/manifesto.js",
   "types": "./dist/manifesto.d.ts",
-  "scripts": {
-    "postinstall": "typings install"
-  },
+  "scripts": {},
   "repository": {
@@ -53,3 +51,3 @@ "type": "git",
     "exjs": "BSick7/exjs#0.5.0",
-    "http-status-codes": "edsilv/http-status-codes#v0.0.5"
+    "http-status-codes": "edsilv/http-status-codes#v0.0.7"
   },
@@ -56,0 +54,0 @@ "directories": {

New alerts

GitHub dependency

Supply chain risk

Contains a dependency which resolves to a GitHub URL. Dependencies fetched from GitHub specifiers are not immutable can be used to inject untrusted code or reduce the likelihood of a reproducible install.

Found 1 instance in 1 package

Manifest confusion

Supply chain risk

This package has inconsistent metadata. This could be malicious or caused by an error when publishing the package.

Found 1 instance in 1 package

Fixed alerts

GitHub dependency

Supply chain risk

Contains a dependency which resolves to a GitHub URL. Dependencies fetched from GitHub specifiers are not immutable can be used to inject untrusted code or reduce the likelihood of a reproducible install.

Found 1 instance in 1 package

Install scripts

Supply chain risk

Install scripts are run when the package is installed. The majority of malware in npm is hidden in install scripts.

Found 1 instance in 1 package

Manifest confusion

Supply chain risk

This package has inconsistent metadata. This could be malicious or caused by an error when publishing the package.

Found 1 instance in 1 package

Improved metrics

Number of high supply chain risk alerts

2

-33.33%

Worsened metrics

Total package byte prevSize

1213391

-0.02%

Number of package files

19

-5%

Lines of code

29736

-0.02%

Dependency changes

• Updated

  http-status-codes@edsilv/http-status-codes#v0.0.7