Comparing version 0.1.0 to 0.2.0
{ | ||
"name": "npm-latest", | ||
"version": "0.1.0", | ||
"version": "0.2.0", | ||
"description": "Quickly find the latest version of a package in npm.", | ||
@@ -23,5 +23,7 @@ "homepage": [ | ||
], | ||
"main": "./lib/npm-latest.js", | ||
"dependencies": { | ||
"colors": "0.6.x", | ||
"lodash": "^2.4.1", | ||
"request": "2.10.x", | ||
"colors": "0.6.x", | ||
"vcsurl": "~0.1.1" | ||
@@ -31,3 +33,3 @@ }, | ||
"bin": { | ||
"npm-latest": "./bin/npm-latest" | ||
"npm-latest": "./bin/cli.js" | ||
}, | ||
@@ -34,0 +36,0 @@ "engines": { |
License Policy Violation
LicenseThis package is not allowed per your license policy. Review the package's license to ensure compliance.
Found 1 instance in 1 package
New author
Supply chain riskA new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.
Found 1 instance in 1 package
Filesystem access
Supply chain riskAccesses the file system, and could potentially read sensitive data.
Found 1 instance in 1 package
License Policy Violation
LicenseThis package is not allowed per your license policy. Review the package's license to ensure compliance.
Found 1 instance in 1 package
Empty package
Supply chain riskPackage does not contain any code. It may be removed, is name squatting, or the result of a faulty package publish.
Found 1 instance in 1 package
New author
Supply chain riskA new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.
Found 1 instance in 1 package
27312
20
123
1
4
1
+ Addedlodash@^2.4.1
+ Addedlodash@2.4.2(transitive)