postcss-100vh-fix - npm Package Compare versions

Comparing version 0.0.1-security to 0.1.0

package.json

 {
   "name": "postcss-100vh-fix",
-  "version": "0.0.1-security",
-  "description": "security holding package",
-  "repository": "npm/security-holder",
-  "dependencies": {}
+  "version": "0.1.0",
+  "description": "PostCSS plugin to fix height/min-height: 100vh on iOS",
+  "keywords": [
+    "postcss",
+    "css",
+    "postcss-plugin",
+    "100vh",
+    "safari",
+    "height",
+    "min-height",
+    "-webkit-fill-available"
+  ],
+  "author": "Andrey Sitnik <[e-mail]>",
+  "license": "MIT",
+  "repository": "postcss/postcss-100vh-fix",
+  "dependencies": {
+    "postcss": "^7.0.32"
+  },
+  "engines": {
+    "node": ">=8.0.0"
+  }
 }

README.md

@@ -1,9 +0,31 @@
-# Security holding package
+# PostCSS `100vh` Fix
 
-This package name is not currently in use, but was formerly occupied
-by another package. To avoid malicious use, npm is hanging on to the
-package name, but loosely, and we'll probably give it to you if you
-want it.
+[PostCSS] plugin to fix [iOS’s bug] with `100vh`.
 
-You may adopt this package by contacting [e-mail] and
-requesting the name.
+```css
+body {
+  height: 100vh;
+}
+```
+
+```css
+body {
+  height: 100vh;
+}
+
+@supports (-webkit-touch-callout: none) {
+  body {
+    height: -webkit-fill-available;
+  }
+}
+```
+
+It works with `min-height` and `max-height` too.
+
+[iOS’s bug]: https://allthingssmitty.com/2020/05/11/css-fix-for-100vh-in-mobile-webkit/
+[PostCSS]: https://github.com/postcss/postcss
+
+<a href="https://evilmartians.com/?utm_source=postcss-dark-theme-class">
+  <img src="https://evilmartians.com/badges/sponsored-by-evil-martians.svg"
+       alt="Sponsored by Evil Martians" width="236" height="54">
+</a>

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

New author

Supply chain risk

A new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.

Found 1 instance in 1 package

No repository

Supply chain risk

Package does not have a linked source code repository. Without this field, a package will have no reference to the location of the source code use to generate the package.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Known malware

Supply chain risk

This package is malware. We have asked the package registry to remove it.

Found 1 instance in 1 package

Empty package

Supply chain risk

Package does not contain any code. It may be removed, is name squatting, or the result of a faulty package publish.

Found 1 instance in 1 package

No contributors or author data

Maintenance

Package does not specify a list of contributors or an author in package.json.

Found 1 instance in 1 package

No License Found

License

(Experimental) License information could not be found.

Found 1 instance in 1 package

No repository

Supply chain risk

Package does not have a linked source code repository. Without this field, a package will have no reference to the location of the source code use to generate the package.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

3037

increased by508.62%

Number of package files

5

increased by150%

Number of low license alerts

0

decreased by-100%

Lines of code

25

increased byInfinity%

Number of low maintenance alerts

1

decreased by-50%

Number of lines in readme file

32

increased by220%

Number of critical supply chain risk alerts

0

decreased by-100%

Worsened metrics

Dependency count

1

increased byInfinity%

Dependency changes

• + Addedpostcss@^7.0.32

• + Addedpicocolors@0.2.1(transitive)

• + Addedpostcss@7.0.39(transitive)

• + Addedsource-map@0.6.1(transitive)