normalize-package-data - npm Package Compare versions

Comparing version 2.4.0 to 2.4.1

lib/fixer.js

@@ -302,3 +302,4 @@ var semver = require("semver")
         typeof(data.license) !== 'string' ||
-        data.license.length < 1
+        data.license.length < 1 ||
+        data.license.trim() === ''
       ) {
@@ -305,0 +306,0 @@ this.warn("invalidLicense")

package.json

 {
   "name": "normalize-package-data",
-  "version": "2.4.0",
+  "version": "2.4.1",
   "author": "Meryn Stol <[e-mail]>",
@@ -17,3 +17,3 @@ "description": "Normalizes data that can be found in package.json files.",
     "hosted-git-info": "^2.1.4",
-    "is-builtin-module": "^1.0.0",
+    "is-builtin-module": "^3.0.0",
     "semver": "2 || 3 || 4 || 5",
@@ -23,4 +23,4 @@ "validate-npm-package-license": "^3.0.1"
   "devDependencies": {
-    "async": "^1.5.0",
-    "tap": "^2.2.0",
+    "async": "^2.6.1",
+    "tap": "^12.4.0",
     "underscore": "^1.8.3"
@@ -27,0 +27,0 @@ },

README.md

@@ -97,3 +97,3 @@ # normalize-package-data [![Build Status](https://travis-ci.org/npm/normalize-package-data.png?branch=master)](https://travis-ci.org/npm/normalize-package-data)
 
-The `license` field should be a valid *SPDX license expression* or one of the special values allowed by [validate-npm-package-license](https://npmjs.com/packages/validate-npm-package-license). See [documentation for the license field in package.json](https://docs.npmjs.com/files/package.json#license).
+The `license` field should be a valid *SPDX license expression* or one of the special values allowed by [validate-npm-package-license](https://npmjs.com/package/validate-npm-package-license). See [documentation for the license field in package.json](https://docs.npmjs.com/files/package.json#license).
 
@@ -100,0 +100,0 @@ ## Credits

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

New author

Supply chain risk

A new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

26658

increased by0.14%

Lines of code

513

increased by0.2%

Worsened metrics

Number of medium supply chain risk alerts

1

increased byInfinity%

Dependency changes

• + Addedbuiltin-modules@3.3.0(transitive)

• + Addedis-builtin-module@3.2.1(transitive)

• - Removedbuiltin-modules@1.1.1(transitive)

• - Removedis-builtin-module@1.0.0(transitive)

• Updatedis-builtin-module@^3.0.0