ode-csslib - npm Package Compare versions

Comparing version 4.2.1 to 4.2.2-develop-pedago.202402161516

dist/version.txt

@@ -1,1 +0,1 @@
-entcore-css-lib 28/11/2023 11:32:04
+entcore-css-lib 16/02/2024 15:16:14

package.json

 {
   "name": "ode-csslib",
-  "version": "4.2.1",
-  "description": "Open Digital Education Legacy CSS framework",
+  "version": "4.2.2-develop-pedago.202402161516",
+  "description": "Edifice Legacy CSS framework",
   "repository": {
     "type": "git",
-    "url": "git+https://github.com/opendigitaleducation/entcore-css-lib"
+    "url": "git+https://github.com/edificeio/entcore-css-lib"
   },
@@ -14,6 +14,6 @@ "keywords": [
   ],
-  "author": "OpenDigitalEducation",
+  "author": "Edifice",
   "license": "AGPL-3.0",
   "bugs": {
-    "url": "https://github.com/opendigitaleducation/entcore-css-lib/issues"
+    "url": "https://github.com/edificeio/entcore-css-lib/issues"
   },
@@ -30,3 +30,3 @@ "homepage": "",
   "dependencies": {
-    "entcore-generic-icons": "git+https://github.com/opendigitaleducation/generic-icons.git#master"
+    "entcore-generic-icons": "git+https://github.com/edificeio/generic-icons.git#master"
   },
@@ -33,0 +33,0 @@ "files": [

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Git dependency

Supply chain risk

Contains a dependency which resolves to a remote git URL. Dependencies fetched from git URLs are not immutable can be used to inject untrusted code or reduce the likelihood of a reproducible install.

Found 1 instance in 1 package

No v1

Quality

Package is not semver >=1. This means it is not stable and does not support ^ ranges.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Git dependency

Supply chain risk

Contains a dependency which resolves to a remote git URL. Dependencies fetched from git URLs are not immutable can be used to inject untrusted code or reduce the likelihood of a reproducible install.

Found 1 instance in 1 package

Native code

Supply chain risk

Contains native code (e.g., compiled binaries or shared libraries). Including native code can obscure malicious behavior.

Found 2 instances in 1 package

Improved metrics

Total package byte prevSize

10324517

increased by0.01%

Number of medium supply chain risk alerts

18

decreased by-10%

Number of versions

164

increased by0.61%

Published versions last two months

27

increased by3.85%

Published versions last week

1

increased byInfinity%

Worsened metrics

Number of downloads

547

decreased by-0.55%

Number of low quality alerts

2

increased by100%

Published versions last months

8

decreased by-11.11%

Dependency changes

• Updatedentcore-generic-icons@git+https://github.com/edificeio/generic-icons.git#master