npm-latest - npm Package Compare versions

Comparing version 0.0.2 to 0.1.0

CHANGELOG.md

@@ -0,3 +1,8 @@
+0.1.0 / 2013-03-19
+------------------
+* Handle multiple arguments [#2 / paulmillr]
+* Convert Github repos to http urls.
+
 0.0.1 / 2012-08-09
 ------------------
 * Initial release.

package.json

 {
-    "name" : "npm-latest", 
-    "version" : "0.0.2",
-    "description" :"Quickly find the latest version of a package in npm.",
-    "homepage" : [
-       "https://github.com/jprichardson/npm-latest.git"
-    ],
-    "repository" : {
-        "type" : "git", 
-        "url" : "[e-mail]:jprichardson/npm-latest.git"
-    },
-    "keywords" : ["npm", "latest", "version"],
-    "author" : "JP Richardson <[e-mail]>",
-    "licenses" : [ {
-        "type" : "MIT"
-    }],
-    "dependencies" : {
-        "request": "2.10.x",
-        "colors": "0.6.x"
-    },
-     "devDepdencies":{},
-    "bin": {
-        "npm-latest": "./bin/npm-latest"
-    },
-    "engines" : { 
-        "node" : ">=0.8.x" 
+  "name": "npm-latest",
+  "version": "0.1.0",
+  "description": "Quickly find the latest version of a package in npm.",
+  "homepage": [
+    "https://github.com/jprichardson/npm-latest.git"
+  ],
+  "repository": {
+    "type": "git",
+    "url": "[e-mail]:jprichardson/npm-latest.git"
+  },
+  "keywords": [
+    "npm",
+    "latest",
+    "version"
+  ],
+  "author": "JP Richardson <[e-mail]>",
+  "licenses": [
+    {
+      "type": "MIT"
     }
+  ],
+  "dependencies": {
+    "request": "2.10.x",
+    "colors": "0.6.x",
+    "vcsurl": "~0.1.1"
+  },
+  "devDepdencies": {},
+  "bin": {
+    "npm-latest": "./bin/npm-latest"
+  },
+  "engines": {
+    "node": ">=0.8.x"
+  }
 }

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

New author

Supply chain risk

A new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Non-existent author

Supply chain risk

The package was published by an npm account that no longer exists.

Found 1 instance in 1 package

Improved metrics

Number of high supply chain risk alerts

0

decreased by-100%

Worsened metrics

Total package byte prevSize

5347

decreased by-4.99%

Dependency count

3

increased by50%

Number of medium supply chain risk alerts

2

increased by100%

Dependency changes

• + Addedvcsurl@~0.1.1

• + Addedvcsurl@0.1.1(transitive)