salad - npm Package Compare versions

Comparing version 0.5.3 to 0.5.4

bower.json

 {
   "name": "salad",
   "main": "build/salad.js",
-  "version": "0.5.3",
+  "version": "0.5.4",
   "homepage": "https://github.com/komola/salad",
@@ -6,0 +6,0 @@ "authors": [

package.json

 {
   "name": "salad",
   "main": "./index.js",
-  "version": "0.5.3",
+  "version": "0.5.4",
   "description": "",
@@ -47,9 +47,10 @@ "homepage": "http://github.com/komola/salad",
     "pg": "~2.3.0",
-    "handlebars": "~1.0.12",
+    "handlebars": "~1.3.0",
     "findit2": "~0.2.0",
     "gaze": "~0.4.1",
-    "lodash": "~1.3.1",
+    "lodash": "~2.4.1",
     "emailjs": "~0.3.5",
     "validator": "~1.5.1",
-    "cli-table": "~0.2.0"
+    "cli-table": "~0.2.0",
+    "coffee-script": "~1.7.1"
   },
@@ -56,0 +57,0 @@ "devDependencies": {

New alerts

Major refactor

Supply chain risk

Package has recently undergone a major refactor. It may be unstable or indicate significant internal changes. Use caution when updating to versions that include significant changes.

Found 1 instance in 1 package

Fixed alerts

Shell access

Supply chain risk

This module accesses the system shell. Accessing the system shell increases the risk of executing arbitrary code.

Found 1 instance in 1 package

Dynamic require

Supply chain risk

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 1 instance in 1 package

Improved metrics

Number of low supply chain risk alerts

3

decreased by-70%

Worsened metrics

Total package byte prevSize

154907

decreased by-37.5%

Dependency count

19

increased by5.56%

Number of package files

106

decreased by-22.63%

Lines of code

82

decreased by-97.08%

Dependency changes

• + Addedcoffee-script@~1.7.1

• + Addedcoffee-script@1.7.1(transitive)

• + Addedhandlebars@1.3.0(transitive)

• + Addedlodash@2.4.2(transitive)

• + Addedmkdirp@0.3.5(transitive)

• - Removedhandlebars@1.0.12(transitive)

• - Removedlodash@1.3.1(transitive)

• Updatedhandlebars@~1.3.0

• Updatedlodash@~2.4.1