pdfkit - npm Package Compare versions

Comparing version 0.1.5 to 0.1.6

package.json

@@ -5,3 +5,3 @@ {
   "keywords": ["pdf", "pdf writer", "pdf generator", "graphics", "document", "vector"],
-  "version": "0.1.5",
+  "version": "0.1.6",
   "homepage": "http://devongovett.github.com/pdfkit/",
@@ -24,5 +24,5 @@ "author": {
       "coffee-script": ">=1.0.1",
-      "zlib": ">=1.0.2"
+      "flate": ">=1.0.2"
   },
   "engine": [ "node >= v0.4.0" ]
 }

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

New author

Supply chain risk

A new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.

Found 1 instance in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

Mixed license

License

(Experimental) Package contains multiple licenses.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Non-existent author

Supply chain risk

The package was published by an npm account that no longer exists.

Found 1 instance in 1 package

Trivial Package

Supply chain risk

Packages less than 10 lines of code are easily copied into your own project and may not warrant the additional supply chain risk of an external dependency.

Found 1 instance in 1 package

Improved metrics

Number of package files

69

increased by4.55%

Lines of code

115

increased by2200%

Number of high supply chain risk alerts

0

decreased by-100%

Worsened metrics

Total package byte prevSize

805167

decreased by-86.31%

Number of low license alerts

1

increased byInfinity%

Number of low supply chain risk alerts

6

increased byInfinity%

Dependency changes

• + Addedflate@>=1.0.2

• + Addedflate@1.0.5(transitive)

• - Removedzlib@>=1.0.2

• - Removedzlib@1.0.5(transitive)