node-ffi - npm Package Compare versions

Comparing version 0.5.1 to 0.5.2

package.json

 { "name": "node-ffi"
-, "version": "0.5.1"
+, "version": "0.5.2"
 , "author": "Rick Branson"
@@ -4,0 +4,0 @@ , "contributors": [

README.md

@@ -53,7 +53,3 @@ node-ffi
 $ cd node-ffi
-$ pushd deps/libffi
-$ ./configure --enable-static --disable-shared && make
-$ popd
-$ node-gyp configure
-$ node-gyp build
+$ node-gyp configure build
 ```
@@ -60,0 +56,0 @@

New alerts

Native code

Supply chain risk

Contains native code (e.g., compiled binaries or shared libraries). Including native code can obscure malicious behavior.

Found 1 instance in 1 package

Copyleft License

License

(Experimental) Copyleft license information was found.

Found 1 instance in 1 package

Mixed license

License

(Experimental) Package contains multiple licenses.

Found 1 instance in 1 package

Non-permissive License

License

(Experimental) A license not known to be considered permissive was found.

Found 1 instance in 1 package

Unidentified License

License

(Experimental) Something that seems like a license was found, but its contents could not be matched with a known license.

Found 4 instances in 1 package

Fixed alerts

New author

Supply chain risk

A new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

7603595

increased by706.73%

Number of package files

786

increased by1504.08%

Worsened metrics

Number of low license alerts

7

increased byInfinity%

License quality

60

decreased by-40%

Number of lines in readme file

98

decreased by-3.92%

Number of medium supply chain risk alerts

11

increased by37.5%

No dependency changes