primer-alerts - npm Package Compare versions

Comparing version 1.1.2 to 1.1.3-mono.0

package.json

 {
-  "version": "1.1.2",
+  "version": "1.1.3-mono.0",
   "name": "primer-alerts",
@@ -15,5 +15,5 @@ "description": "Flash messages, or alerts, inform users of successful or pending actions.",
   ],
-  "repository": "https://github.com/primer/primer-alerts.git",
+  "repository": "https://github.com/primer/primer-css/tree/master/packages/primer-alerts",
   "bugs": {
-    "url": "https://github.com/primer/primer-alerts/issues"
+    "url": "https://github.com/primer/primer-css/issues"
   },
@@ -26,8 +26,8 @@ "scripts": {
   "dependencies": {
-    "primer-support": "*"
+    "primer-support": "^4.0.1-mono.0"
   },
   "devDependencies": {
+    "primer-module-build": "*",
     "stylelint": "*",
-    "stylelint-config-primer": "*",
-    "primer-module-build": "*"
+    "stylelint-config-primer": "*"
   },
@@ -34,0 +34,0 @@ "keywords": [

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

New author

Supply chain risk

A new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.

Found 1 instance in 1 package

No repository

Supply chain risk

Package does not have a linked source code repository. Without this field, a package will have no reference to the location of the source code use to generate the package.

Found 1 instance in 1 package

No v1

Quality

Package is not semver >=1. This means it is not stable and does not support ^ ranges.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Wildcard dependency

Quality

Package has a dependency with a floating version range. This can cause issues if the dependency publishes a new major version.

Found 1 instance in 1 package

No repository

Supply chain risk

Package does not have a linked source code repository. Without this field, a package will have no reference to the location of the source code use to generate the package.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

16152

increased by0.27%

Number of medium quality alerts

0

decreased by-100%

Worsened metrics

Number of low quality alerts

1

increased byInfinity%

Number of medium supply chain risk alerts

2

increased by100%

Dependency changes

• + Addedprimer-support@4.7.2(transitive)

• - Removedprimer-support@5.0.0(transitive)

• Updatedprimer-support@^4.0.1-mono.0