node-image - npm Package Compare versions

Comparing version 0.5.0 to 0.5.1

package.json

 {
    "name": "node-image",
-   "version": "0.5.0",
+   "version": "0.5.1",
    "description": "A Node.JS wrapper around FreeImage",
@@ -47,8 +47,6 @@ "main": "lib/image.js",
    ],
-   "repositories": [
-       {
-           "type": "git",
-           "url": "https://[e-mail]/mikeseven/node-image.git" 
-       } 
-   ],
+   "repository": {
+       "type": "git",
+       "url": "https://[e-mail]/mikeseven/node-image.git" 
+   },
    "directories": {
@@ -60,8 +58,8 @@ "src": "src",
    "engines": {
-       "node": ">=0.5.9"
+       "node": "0.5.9-0.11.3"
    },
    "scripts": {
-       "install": "rm -rf build; node-waf configure clean build"
+       "install": "node-gyp rebuild"
    }
 }
 

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Native code

Supply chain risk

Contains native code (e.g., compiled binaries or shared libraries). Including native code can obscure malicious behavior.

Found 5 instances in 1 package

Mixed license

License

(Experimental) Package contains multiple licenses.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Install scripts

Supply chain risk

Install scripts are run when the package is installed. The majority of malware in npm is hidden in install scripts.

Found 1 instance in 1 package

Native code

Supply chain risk

Contains native code (e.g., compiled binaries or shared libraries). Including native code can obscure malicious behavior.

Found 4 instances in 1 package

Mixed license

License

(Experimental) Package contains multiple licenses.

Found 1 instance in 1 package

No repository

Supply chain risk

Package does not have a linked source code repository. Without this field, a package will have no reference to the location of the source code use to generate the package.

Found 1 instance in 1 package

Improved metrics

Number of high supply chain risk alerts

0

decreased by-100%

Number of low supply chain risk alerts

2

decreased by-50%

Worsened metrics

Total package byte prevSize

517178

decreased by-92.51%

Number of package files

27

decreased by-42.55%

Lines of code

131

decreased by-12.67%

Number of medium supply chain risk alerts

5

increased by25%

No dependency changes