reason - npm Package Compare versions

Comparing version 1.3.2 to 1.4.0-source

package.json

 
 {
-    "version": "1.3.2",
+    "version": "1.4.0-source",
     "description": "Reason Meta Language Toolchain",
@@ -27,3 +27,3 @@ "repository": {
         "version": {
-            "val": "1.3.2",
+            "val": "1.4.0",
             "global": true,
@@ -46,3 +46,3 @@ "globalCollisionBehavior": "clobber"
             "globalCollisionBehavior": "clobber",
-            "val": "1.3.2"
+            "val": "1.4.0"
         }
@@ -60,8 +60,7 @@ },
         "@opam-alpha/ocaml": "= 4.02.3",
+        "@opam-alpha/utop": "*",
         "dependency-env": "https://github.com/reasonml/dependency-env.git",
         "substs": "https://github.com/yunxing/substs.git",
         "opam-installer-bin": "https://github.com/yunxing/opam-installer-bin.git",
-        "nopam": "https://github.com/reasonml/nopam.git",
-        "utop-bin": "https://github.com/reasonml/utop-bin"
-
+        "nopam": "https://github.com/reasonml/nopam.git"
     },
@@ -68,0 +67,0 @@ "scripts": {

README.md

@@ -90,3 +90,3 @@
 ---------------
-Get in touch! We're on IRC freenode #reasonml, and [Gitter](https://gitter.im/facebook/reason).
+Get in touch! We're on IRC freenode #reasonml, and [Discord](https://discord.gg/reasonml).
 
@@ -93,0 +93,0 @@ Contributing To Development

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Wildcard dependency

Quality

Package has a dependency with a floating version range. This can cause issues if the dependency publishes a new major version.

Found 1 instance in 1 package

No v1

Quality

Package is not semver >=1. This means it is not stable and does not support ^ ranges.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

HTTP dependency

Supply chain risk

Contains a dependency which resolves to a remote HTTP URL which could be used to inject untrusted code and reduce overall package reliability.

Found 1 instance in 1 package

Manifest confusion

Supply chain risk

This package has inconsistent metadata. This could be malicious or caused by an error when publishing the package.

Found 1 instance in 1 package

Improved metrics

Number of high supply chain risk alerts

6

decreased by-14.29%

Number of medium supply chain risk alerts

14

decreased by-6.67%

Worsened metrics

Total package byte prevSize

2629280

decreased by-25.83%

Number of package files

245

decreased by-4.3%

Number of low quality alerts

1

increased byInfinity%

Number of medium quality alerts

2

increased by100%

Dependency changes

• + Added@opam-alpha/utop@*

• + Added@opam-alpha/utop@1.19.3(transitive)

• - Removedutop-bin@https://github.com/reasonml/utop-bin