markmap-cli - npm Package Compare versions

Comparing version 0.4.2 to 0.4.3-alpha.1

package.json

 {
   "name": "markmap-cli",
-  "version": "0.4.2",
+  "version": "0.4.3-alpha.1+a8c283a",
   "description": "Create markmaps from CLI",
@@ -28,7 +28,7 @@ "author": "Gerald <[e-mail]>",
     "build:js": "rollup -c rollup.conf.js",
-    "prebuild": "yarn ci && yarn clean",
-    "prepublishOnly": "yarn build",
-    "ci": "yarn lint",
+    "prebuild": "npm run ci && npm run clean",
+    "prepublishOnly": "npm run build",
+    "ci": "npm run lint",
     "lint": "eslint --ext .ts .",
-    "build": "tsc && yarn build:js"
+    "build": "tsc && npm run build:js"
   },
@@ -47,3 +47,3 @@ "bugs": {
     "@babel/runtime": "^7.11.2",
-    "markmap-lib": "^0.10.2"
+    "markmap-lib": "^0.10.3-alpha.1+a8c283a"
   },
@@ -60,3 +60,3 @@ "dependencies": {
   },
-  "gitHead": "3d2300a0c6421cc15f9e80de70f3be0be0d8c3bb"
+  "gitHead": "a8c283a76f6984feb3f6ca1da2b63d2d6d1c29ca"
 }

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Manifest confusion

Supply chain risk

This package has inconsistent metadata. This could be malicious or caused by an error when publishing the package.

Found 1 instance in 1 package

Uses eval

Supply chain risk

Package uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

829258

increased by3.03%

Lines of code

15458

increased by4%

Worsened metrics

Number of medium supply chain risk alerts

3

increased by200%

No dependency changes