npm-profile - npm Package Compare versions

Comparing version 5.0.4 to 6.0.0

package.json

 {
   "name": "npm-profile",
-  "version": "5.0.4",
+  "version": "6.0.0",
   "description": "Library for updating an npmjs.com profile",
   "keywords": [],
-  "author": "Rebecca Turner <[e-mail]> (http://re-becca.org/)",
+  "author": "GitHub Inc.",
   "license": "ISC",
   "dependencies": {
-    "npm-registry-fetch": "^11.0.0"
+    "npm-registry-fetch": "^12.0.0"
   },
-  "main": "index.js",
+  "main": "./lib/index.js",
   "repository": {
@@ -17,9 +17,9 @@ "type": "git",
   "files": [
-    "index.js"
+    "bin",
+    "lib"
   ],
   "devDependencies": {
-    "nock": "^12.0.1",
-    "require-inject": "^1.4.4",
-    "standard": "^14.3.1",
-    "tap": "^14.10.6"
+    "@npmcli/template-oss": "^2.5.1",
+    "nock": "^13.2.1",
+    "tap": "^15.1.5"
   },
@@ -30,5 +30,8 @@ "scripts": {
     "prepublishOnly": "git push origin --follow-tags",
-    "posttest": "standard index.js",
+    "posttest": "npm run lint",
     "test": "tap",
-    "snap": "tap"
+    "snap": "tap",
+    "lint": "eslint '**/*.js'",
+    "postlint": "npm-template-check",
+    "lintfix": "npm run lint -- --fix"
   },
@@ -39,4 +42,7 @@ "tap": {
   "engines": {
-    "node": ">=10"
+    "node": "^12.13.0 || ^14.15.0 || >=16"
+  },
+  "templateOSS": {
+    "version": "2.5.1"
   }
 }

README.md

@@ -7,3 +7,3 @@ # npm-profile
 const profile = require('npm-profile')
-const result = await profile.get(registry, {token})
+const result = await profile.get({token})
 //...
@@ -10,0 +10,0 @@ ```

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Major refactor

Supply chain risk

Package has recently undergone a major refactor. It may be unstable or indicate significant internal changes. Use caution when updating to versions that include significant changes.

Found 1 instance in 1 package

New author

Supply chain risk

A new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

27534

increased by0.81%

Dev dependency count

3

decreased by-25%

Lines of code

254

increased by1.6%

Worsened metrics

Number of medium supply chain risk alerts

13

increased by18.18%

Dependency changes

• + Added@npmcli/fs@2.1.2(transitive)

• + Added@npmcli/move-file@2.0.1(transitive)

• + Added@tootallnate/once@2.0.0(transitive)

• + Addedbrace-expansion@2.0.1(transitive)

• + Addedcacache@16.1.3(transitive)

• + Addedglob@8.1.0(transitive)

• + Addedhttp-proxy-agent@5.0.0(transitive)

• + Addedlru-cache@7.18.3(transitive)

• + Addedmake-fetch-happen@10.2.1(transitive)

• + Addedminimatch@5.1.6(transitive)

• + Addedminipass-fetch@2.1.2(transitive)

• + Addednpm-registry-fetch@12.0.2(transitive)

• + Addedsocks-proxy-agent@7.0.0(transitive)

• + Addedssri@9.0.1(transitive)

• + Addedunique-filename@2.0.1(transitive)

• + Addedunique-slug@3.0.0(transitive)

• - Removed@npmcli/fs@1.1.1(transitive)

• - Removed@npmcli/move-file@1.1.2(transitive)

• - Removed@tootallnate/once@1.1.2(transitive)

• - Removedcacache@15.3.0(transitive)

• - Removedhttp-proxy-agent@4.0.1(transitive)

• - Removedmake-fetch-happen@9.1.0(transitive)

• - Removednpm-registry-fetch@11.0.0(transitive)

• - Removedsocks-proxy-agent@6.2.1(transitive)

• - Removedssri@8.0.1(transitive)

• - Removedunique-filename@1.1.1(transitive)

• - Removedunique-slug@2.0.2(transitive)

• Updatednpm-registry-fetch@^12.0.0