needs - npm Package Compare versions

Comparing version 1.0.2 to 1.0.3

package.json

 {
   "name": "needs",
-  "version": "1.0.2",
+  "version": "1.0.3",
   "description": "Require multiple modules in node.js.",
   "main": "index.js",
   "scripts": {
-    "test": "gulp"
+    "test": "./node_modules/.bin/mocha test/**/*.test.js"
   },
@@ -28,21 +28,9 @@ "repository": {
   "dependencies": {
-    "lodash": ">=4.x.x",
-    "minimatch": ">=3.x.x"
+    "lodash": "^4.x.x",
+    "minimatch": "^3.x.x"
   },
   "devDependencies": {
     "chai": "~3.5.0",
-    "eslint-config-xo-space": "^0.10.0",
-    "gulp": "^3.9.1",
-    "gulp-coveralls": "^0.1.4",
-    "gulp-eslint": "^2.0.0",
-    "gulp-exclude-gitignore": "^1.0.0",
-    "gulp-istanbul": "^0.10.3",
-    "gulp-mocha": "^2.2.0",
-    "gulp-nsp": "^2.3.0",
-    "gulp-plumber": "^1.1.0",
-    "mocha": "~2.4.5"
-  },
-  "publishConfig": {
-    "registry": "http://registry.npmjs.org"
+    "mocha": "~3.2.0"
   }
 }

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 1 instance in 1 package

Improved metrics

Dev dependency count

2

decreased by-81.82%

Number of low supply chain risk alerts

5

decreased by-16.67%

Worsened metrics

Total package byte prevSize

13454

decreased by-11.72%

Number of package files

24

decreased by-4%

Lines of code

324

decreased by-14.06%

Dependency changes

• + Addedbrace-expansion@1.1.11(transitive)

• + Addedconcat-map@0.0.1(transitive)

• + Addedminimatch@3.1.2(transitive)

• - Removedbrace-expansion@2.0.1(transitive)

• - Removedminimatch@10.0.1(transitive)

• Updatedlodash@^4.x.x

• Updatedminimatch@^3.x.x