meta-yaml - npm Package Compare versions

Comparing version 0.0.1 to 0.1.0

package.json

 {
   "name": "meta-yaml",
-  "version": "0.0.1",
+  "version": "0.1.0",
   "description": "JSON Metafile generator for rsa-yaml",
@@ -13,8 +13,5 @@ "keywords": [
   "dependencies": {
-    "argparse": "^0.1.15",
-    "glob": "^3.1.21",
-    "fs": "0.0.2"
+    "lodash": "~2.4.1"
   },
-  "devDependencies": {
-  },
+  "devDependencies": {},
   "repository": {
@@ -21,0 +18,0 @@ "type": "git",

README.md

@@ -13,2 +13,3 @@ meta-yaml
 
+    ---
     key1: 1
@@ -33,3 +34,3 @@ key2: 'val2'
     myml = require('meta-yaml');
-    var json_out = myml.parse(fs.readFileSync("test-yml-file.yml", 'utf8'));
+    var json_out = myml.parse(fs.readFileSync("test-file.yml", 'utf8'));
 
@@ -36,0 +37,0 @@

New alerts

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

Fixed alerts

Empty package

Supply chain risk

Package does not contain any code. It may be removed, is name squatting, or the result of a faulty package publish.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

3174

increased by34.78%

Dependency count

1

decreased by-66.67%

Number of package files

8

increased by60%

Lines of code

20

increased byInfinity%

Number of lines in readme file

39

increased by2.63%

Number of medium supply chain risk alerts

0

decreased by-100%

Worsened metrics

Number of low supply chain risk alerts

1

increased byInfinity%

Dependency changes

• + Addedlodash@~2.4.1

• + Addedlodash@2.4.2(transitive)

• - Removedargparse@^0.1.15

• - Removedfs@0.0.2

• - Removedglob@^3.1.21

• - Removedargparse@0.1.16(transitive)

• - Removedfs@0.0.2(transitive)

• - Removedglob@3.2.11(transitive)

• - Removedinherits@2.0.4(transitive)

• - Removedlru-cache@2.7.3(transitive)

• - Removedminimatch@0.3.0(transitive)

• - Removedsigmund@1.0.1(transitive)

• - Removedunderscore@1.7.0(transitive)

• - Removedunderscore.string@2.4.0(transitive)