pub - npm Package Compare versions

Comparing version 0.0.0 to 0.0.1

package.json

 {
   "author": "Paul Vorbach <[e-mail]> (http://vorb.de/)",
   "name": "pub",
-  "description": "A command line tool for git powered content management",
-  "tags": [ "cli", "git", "cms" ],
-  "version": "0.0.0",
+  "description": "A command line tool for customizable content management",
+  "tags": [
+    "cli",
+    "cms"
+  ],
+  "version": "0.0.1",
   "repository": {
@@ -15,5 +18,14 @@ "type": "git",
   "main": "./pub.js",
+  "bin": {
+    "tpl": "./bin/pub"
+  },
   "engines": {
     "node": ">=0.6.0"
-  }
+  },
+  "dependencies": {
+    "append": ">=0.1.1",
+    "confdir": ">=0.0.2",
+    "optimist": ">=0.3.0"
+  },
+  "devDependencies": {}
 }

New alerts

Dynamic require

Supply chain risk

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

Found 1 instance in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

Fixed alerts

Empty package

Supply chain risk

Package does not contain any code. It may be removed, is name squatting, or the result of a faulty package publish.

Found 1 instance in 1 package

No README

Quality

Package does not have a README. This may indicate a failed publish or a low quality package.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

4720

increased by176.02%

Number of package files

7

increased by75%

Lines of code

32

increased byInfinity%

Number of medium quality alerts

1

decreased by-50%

Number of lines in readme file

31

increased byInfinity%

Number of medium supply chain risk alerts

0

decreased by-100%

Worsened metrics

Dependency count

3

increased byInfinity%

Number of low supply chain risk alerts

2

increased byInfinity%

Dependency changes

• + Addedappend@>=0.1.1

• + Addedconfdir@>=0.0.2

• + Addedoptimist@>=0.3.0

• + Addedappend@0.1.1(transitive)

• + Addedconfdir@0.0.2(transitive)

• + Addedminimist@0.0.10(transitive)

• + Addedoptimist@0.6.1(transitive)

• + Addedwordwrap@0.0.3(transitive)