ode-csslib - npm Package Compare versions

Comparing version 4.0.4 to 4.0.5-dev.202301181145

dist/version.txt

@@ -1,1 +0,1 @@
-entcore-css-lib=4.0.2 13/12/2022 16:48:33
+entcore-css-lib=4.0.2 18/01/2023 11:46:18

package.json

 {
   "name": "ode-csslib",
-  "version": "4.0.4",
+  "version": "4.0.5-dev.202301181145",
   "description": "Open Digital Education Legacy CSS framework",
@@ -46,5 +46,5 @@ "scripts": {
   "dependencies": {
-    "entcore-generic-icons": "git+https://github.com/opendigitaleducation/generic-icons.git"
+    "entcore-generic-icons": "git+https://github.com/opendigitaleducation/generic-icons.git#master"
   },
   "files": ["assets", "scss", "dist"]
 }

New alerts

Git dependency

Supply chain risk

Contains a dependency which resolves to a remote git URL. Dependencies fetched from git URLs are not immutable and can be used to inject untrusted code or reduce the likelihood of a reproducible install.

Found 1 instance in 1 package

No v1

Quality

Package is not semver >=1. This means it is not stable and does not support ^ ranges.

Found 1 instance in 1 package

Fixed alerts

Git dependency

Supply chain risk

Contains a dependency which resolves to a remote git URL. Dependencies fetched from git URLs are not immutable and can be used to inject untrusted code or reduce the likelihood of a reproducible install.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

8083730

increased by0.31%

Number of package files

742

increased by0.82%

Lines of code

7278

increased by0.68%

Worsened metrics

Number of low quality alerts

2

increased by100%

Dependency changes

• Updatedentcore-generic-icons@git+https://github.com/opendigitaleducation/generic-icons.git#master