ordered-queue - npm Package Compare versions

Comparing version 1.0.0 to 1.0.1

package.json

@@ -9,3 +9,3 @@ {
   ],
-  "version": "1.0.0",
+  "version": "1.0.1",
   "repository": {
@@ -17,2 +17,5 @@ "type": "git",
   "main": "./lib/index.js",
+  "files": [
+    "lib"
+  ],
   "scripts": {
@@ -19,0 +22,0 @@ "test": "istanbul cover node_modules/.bin/_mocha -- test/*-test.js"

README.md

@@ -50,3 +50,3 @@ # ordered-queue.js
 # Tests
-Tests are written with [mocha](http://visionmedia.github.com/mocha/)
+Tests are written with [mocha](https://mochajs.org)
 
@@ -53,0 +53,0 @@ ```bash

.travis.yml

-language: node_js
-node_js:
-  - "0.12"
-  - "iojs"
-  - "4"
-  - "6"
-  - "7"
-notifications:
-  email:
-    on_success: change
-    on_failure: change
-sudo: false
-after_success:
-  - npm install -g codecov
-  - codecov

New alerts

Uses eval

Supply chain risk

Package uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Found 1 instance in 1 package

Fixed alerts

Uses eval

Supply chain risk

Package uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Found 1 instance in 1 package

Worsened metrics

Total package byte prevSize

4208

-4.8%

Number of package files

4

-33.33%

No dependency changes