popup - npm Package Compare versions

Comparing version 0.0.2 to 0.0.3

component.json

@@ -5,3 +5,3 @@ {
   "description": "Component to create a native popup window via window.open()",
-  "version": "0.0.2",
+  "version": "0.0.3",
   "keywords": [],
@@ -14,3 +14,4 @@ "dependencies": {
     "index.js"
-  ]
+  ],
+  "license": "MIT"
 }

package.json

 {
   "name": "popup",
   "description": "Component to create a native popup window via window.open()",
-  "version": "0.0.2",
+  "version": "0.0.3",
   "dependencies": {
-    "emitter-component": "*",
-    "inherit-component": "*"
+    "component-emitter": "*",
+    "component-inherit": "*"
   },
+  "browser": {
+    "emitter": "component-emitter",
+    "inherit": "component-inherit"
+  },
   "component": {
@@ -13,3 +17,8 @@ "scripts": {
     }
-  }
+  },
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/component/popup.git"
+  },
+  "license": "MIT"
 }

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Wildcard dependency

Quality

Package has a dependency with a floating version range. This can cause issues if the dependency publishes a new major version.

Found 2 instances in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Wildcard dependency

Quality

Package has a dependency with a floating version range. This can cause issues if the dependency publishes a new major version.

Found 2 instances in 1 package

Major refactor

Supply chain risk

Package has recently undergone a major refactor. It may be unstable or indicate significant internal changes. Use caution when updating to versions that include significant changes.

Found 1 instance in 1 package

New author

Supply chain risk

A new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.

Found 1 instance in 1 package

No License Found

License

(Experimental) License information could not be found.

Found 1 instance in 1 package

No repository

Supply chain risk

Package does not have a linked source code repository. Without this field, a package will have no reference to the location of the source code use to generate the package.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

4813

increased by9.39%

Number of package files

8

increased by14.29%

Number of low license alerts

0

decreased by-100%

Lines of code

131

increased by0.77%

Number of low supply chain risk alerts

0

decreased by-100%

Number of medium supply chain risk alerts

0

decreased by-100%

Dependency changes

• + Addedcomponent-emitter@*

• + Addedcomponent-inherit@*

• + Addedcomponent-emitter@2.0.0(transitive)

• + Addedcomponent-inherit@0.0.3(transitive)

• - Removedemitter-component@*

• - Removedinherit-component@*

• - Removedemitter-component@2.0.0(transitive)

• - Removedinherit-component@0.0.2(transitive)