node-gyp - npm Package Compare versions

Comparing version 0.10.5 to 0.10.6

package.json

@@ -1,27 +0,41 @@
-{ "name": "node-gyp"
-, "description": "Node.js native addon build tool"
-, "keywords": [ "native", "addon", "module", "c", "c++", "bindings", "gyp" ]
-, "version": "0.10.5"
-, "installVersion": 9
-, "author": "Nathan Rajlich <[e-mail]> (http://tootallnate.net)"
-, "repository": { "type": "git", "url": "git://github.com/TooTallNate/node-gyp.git" }
-, "preferGlobal": true
-, "bin": "./bin/node-gyp.js"
-, "main": "./lib/node-gyp.js"
-, "dependencies": {
-      "glob": "3"
-    , "graceful-fs": "1"
-    , "fstream": "0"
-    , "minimatch": "0"
-    , "mkdirp": "0"
-    , "nopt": "2"
-    , "npmlog": "0"
-    , "osenv": "0"
-    , "request": "2"
-    , "rimraf": "2"
-    , "semver": "~2.0.7"
-    , "tar": "0"
-    , "which": "1"
+{
+  "name": "node-gyp",
+  "description": "Node.js native addon build tool",
+  "keywords": [
+    "native",
+    "addon",
+    "module",
+    "c",
+    "c++",
+    "bindings",
+    "gyp"
+  ],
+  "version": "0.10.6",
+  "installVersion": 9,
+  "author": "Nathan Rajlich <[e-mail]> (http://tootallnate.net)",
+  "repository": {
+    "type": "git",
+    "url": "git://github.com/TooTallNate/node-gyp.git"
+  },
+  "preferGlobal": true,
+  "bin": "./bin/node-gyp.js",
+  "main": "./lib/node-gyp.js",
+  "dependencies": {
+    "glob": "3",
+    "graceful-fs": "2",
+    "fstream": "0",
+    "minimatch": "0",
+    "mkdirp": "0",
+    "nopt": "2",
+    "npmlog": "0",
+    "osenv": "0",
+    "request": "2",
+    "rimraf": "2",
+    "semver": "~2.0.7",
+    "tar": "0",
+    "which": "1"
+  },
+  "engines": {
+    "node": ">= 0.8.0"
   }
-, "engines": { "node": ">= 0.8.0" }
 }

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

New author

Supply chain risk

A new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

1297761

Worsened metrics

Number of medium supply chain risk alerts

4

increased by33.33%

Dependency changes

• + Addedgraceful-fs@2.0.3(transitive)

• - Removedgraceful-fs@1.2.3(transitive)

• Updatedgraceful-fs@2