panda-river - npm Package Compare versions

Comparing version 6.0.0 to 6.0.1

package.json

 {
   "name": "panda-river",
-  "version": "6.0.0",
+  "version": "6.0.1",
   "description": "JavaScript reactive programming in a functional style",
-  "main": "build/npm/src/index.js",
   "scripts": {
@@ -18,10 +17,23 @@ "test": "p9k npm:test"
   ],
-  "authors": [
-    "Dan Yoder"
+  "contributors": [
+    {
+      "name": "Dan Yoder",
+      "email": "[e-mail]"
+    },
+    {
+      "name": "David Harper",
+      "email": "[e-mail]"
+    }
   ],
+  "main": "build/npm/src/index.js",
+  "main:coffee": "src/index.coffee",
+  "files": [
+    "src",
+    "build/npm/src"
+  ],
   "license": "MIT",
   "dependencies": {
-    "panda-garden": "^5.0.0",
-    "panda-generics": "^6.0.0",
-    "panda-parchment": "^5.0.0"
+    "@pandastrike/garden": "^8.0.1",
+    "panda-generics": "^6.0.3",
+    "panda-parchment": "^6.0.4"
   },
@@ -31,5 +43,6 @@ "devDependencies": {
     "panda-9000": "5.0.2",
-    "panda-builder": "4.0.13"
+    "panda-builder": "4.0.13",
+    "panda-garden": "^5.0.0"
   },
   "engine": "node >= 8.10"
 }

New alerts

Major refactor

Supply chain risk

Package has recently undergone a major refactor. It may be unstable or indicate significant internal changes. Use caution when updating to versions that include significant changes.

Found 1 instance in 1 package

Fixed alerts

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 1 instance in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

No contributors or author data

Maintenance

Package does not specify a list of contributors or an author in package.json.

Found 1 instance in 1 package

Improved metrics

Number of low maintenance alerts

1

decreased by-50%

Number of low supply chain risk alerts

0

decreased by-100%

Worsened metrics

Total package byte prevSize

80200

decreased by-69.32%

Dev dependency count

4

increased by33.33%

Number of package files

15

decreased by-70%

Lines of code

1020

decreased by-68.89%

Number of medium supply chain risk alerts

1

increased byInfinity%

Dependency changes

• + Added@pandastrike/garden@^8.0.1

• + Added@pandastrike/garden@8.0.1(transitive)

• + Addedpanda-parchment@6.0.4(transitive)

• - Removedpanda-garden@^5.0.0

• - Removedpanda-garden@4.0.35.0.0(transitive)

• - Removedpanda-parchment@5.0.2(transitive)

• Updatedpanda-generics@^6.0.3

• Updatedpanda-parchment@^6.0.4