qpp-measures-data - npm Package Compare versions

Comparing version 7.7.0-beta.5 to 7.7.0

package.json

 {
   "name": "qpp-measures-data",
-  "version": "7.7.0-beta.5",
+  "version": "v7.7.0",
   "description": "Quality Payment Program Measures Data Repository",
@@ -5,0 +5,0 @@ "repository": {

scripts/benchmarks/csv-json-converter.ts

@@ -20,3 +20,3 @@ /**
 // command to use this file:
-//  node dist/benchmarks/csv-json-converter.js staging/2023/benchmarks/[fileName].csv 2023 [fileName]
+//  node dist/scripts/benchmarks/csv-json-converter.js staging/2023/benchmarks/[fileName].csv 2023 [fileName]
 export function convertCsvToJson(csvPath: string, performanceYear: number, jsonFileName: string) {
@@ -23,0 +23,0 @@ const csv = fetchCSV(csvPath);

scripts/benchmarks/merge-benchmark-files.ts

@@ -11,3 +11,3 @@ import fs from 'fs';
 // command to use this file:
-//  node ./dist/benchmarks/merge-benchmark-files.js ./util/2023/benchmarks/json/ > ./benchmarks/2023.json
+//  node ./dist/scripts/benchmarks/merge-benchmark-files.js ./util/2023/benchmarks/json/ > ./benchmarks/2023.json
 export function mergeBenchmarkFiles(benchmarksPath: string, performanceYear: number) {
@@ -14,0 +14,0 @@ const mergedBenchmarks = new Map();

scripts/validate-data.ts

@@ -47,3 +47,3 @@ /**
 // Load the schema file
-const schema = YAML.parse(fs.readFileSync(path.join(__dirname, '../', optionalPath || schemaType, performanceYear, schemaType + '-schema.yaml'), 'utf8'));
+const schema = YAML.parse(fs.readFileSync(path.join(appRoot + '', optionalPath || schemaType, performanceYear, schemaType + '-schema.yaml'), 'utf8'));
 
@@ -50,0 +50,0 @@ // Validate the json against the schema

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Manifest confusion

Supply chain risk

This package has inconsistent metadata. This could be malicious or caused by an error when publishing the package.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 2 instances in 1 package

No v1

Quality

Package is not semver >=1. This means it is not stable and does not support ^ ranges.

Found 1 instance in 1 package

Improved metrics

Number of low quality alerts

1

decreased by-50%

Number of low supply chain risk alerts

61

decreased by-29.89%

Worsened metrics

Total package byte prevSize

92804996

decreased by-0.24%

Number of package files

661

decreased by-14.04%

Lines of code

1447302

decreased by-0.35%

Number of medium supply chain risk alerts

1

increased byInfinity%

No dependency changes