ode-csslib - npm Package Compare versions

Comparing version 4.2.1 to 4.2.2

dist/version.txt

@@ -1,1 +0,1 @@
-entcore-css-lib 28/11/2023 11:32:04
+entcore-css-lib 15/02/2024 12:34:48

package.json

 {
   "name": "ode-csslib",
-  "version": "4.2.1",
-  "description": "Open Digital Education Legacy CSS framework",
+  "version": "4.2.2",
+  "description": "Edifice Legacy CSS framework",
   "repository": {
     "type": "git",
-    "url": "git+https://github.com/opendigitaleducation/entcore-css-lib"
+    "url": "git+https://github.com/edificeio/entcore-css-lib"
   },
@@ -14,6 +14,6 @@ "keywords": [
   ],
-  "author": "OpenDigitalEducation",
+  "author": "Edifice",
   "license": "AGPL-3.0",
   "bugs": {
-    "url": "https://github.com/opendigitaleducation/entcore-css-lib/issues"
+    "url": "https://github.com/edificeio/entcore-css-lib/issues"
   },
@@ -30,3 +30,3 @@ "homepage": "",
   "dependencies": {
-    "entcore-generic-icons": "git+https://github.com/opendigitaleducation/generic-icons.git#master"
+    "entcore-generic-icons": "git+https://github.com/edificeio/generic-icons.git#master"
   },
@@ -33,0 +33,0 @@ "files": [

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Git dependency

Supply chain risk

Contains a dependency which resolves to a remote git URL. Dependencies fetched from git URLs are not immutable can be used to inject untrusted code or reduce the likelihood of a reproducible install.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Git dependency

Supply chain risk

Contains a dependency which resolves to a remote git URL. Dependencies fetched from git URLs are not immutable can be used to inject untrusted code or reduce the likelihood of a reproducible install.

Found 1 instance in 1 package

Native code

Supply chain risk

Contains native code (e.g., compiled binaries or shared libraries). Including native code can obscure malicious behavior.

Found 2 instances in 1 package

Improved metrics

Total package byte prevSize

10324489

increased by0.01%

Number of medium supply chain risk alerts

18

decreased by-10%

Dependency changes

• Updatedentcore-generic-icons@git+https://github.com/edificeio/generic-icons.git#master