progbar - npm Package Compare versions

Comparing version 1.2.0 to 1.2.1

lib/progbar.js

 /*
- * Copyright (c) 2017, Joyent, Inc.
+ * Copyright (c) 2018, Joyent, Inc.
  */
@@ -15,5 +15,5 @@
 var mod_assert = require('assert-plus');
-var mod_sprintf = require('sprintf');
+var mod_extsprintf = require('extsprintf');
 
-var sprintf = mod_sprintf.sprintf;
+var sprintf = mod_extsprintf.sprintf;
 
@@ -20,0 +20,0 @@ /*

package.json

 {
 	"name": "progbar",
 	"author": "Joshua M. Clulow <[e-mail]>",
-	"version": "1.2.0",
+	"version": "1.2.1",
 	"description": "terminal progress bar",
@@ -13,3 +13,2 @@ "main": "./lib/progbar.js",
 	],
-
 	"repository": {
@@ -19,13 +18,10 @@ "type": "git",
 	},
-
 	"dependencies": {
-		"assert-plus": "~0.1.5",
-		"sprintf": "~0.1.3",
+		"assert-plus": "^1.0.0",
+		"extsprintf": "^1.4.0",
 		"readable-stream": "~1.0.27-1"
 	},
-
 	"devDependencies": {
 		"jshint": "^2.7.0"
 	},
-
 	"keywords": [
@@ -32,0 +28,0 @@ "progress",

New alerts

New author

Supply chain risk

A new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.

Found 1 instance in 1 package

Worsened metrics

Total package byte prevSize

16197

decreased by-0.22%

Number of package files

4

decreased by-20%

Number of medium supply chain risk alerts

1

increased byInfinity%

Dependency changes

• + Addedextsprintf@^1.4.0

• + Addedassert-plus@1.0.0(transitive)

• + Addedextsprintf@1.4.1(transitive)

• - Removedsprintf@~0.1.3

• - Removedassert-plus@0.1.5(transitive)

• - Removedsprintf@0.1.5(transitive)

• Updatedassert-plus@^1.0.0