semantic-ui - npm Package Compare versions

Comparing version 0.19.3 to 1.0.1

package.json

 {
   "name": "semantic-ui",
-  "version": "0.19.3",
+  "version": "1.0.1",
   "title": "Semantic UI",
   "description": "Semantic empowers designers and developers by creating a shared vocabulary for UI.",
   "homepage": "http://www.semantic-ui.com",
-  "author": "Jack Lukic <[e-mail]>",
+  "author": "Jack Lukic <[e-mail]>",
   "license": "MIT",
   "scripts": {
-    "test": "grunt test"
+    "test": "gulp test"
   },
   "repository": {
     "type": "git",
-    "url": "git://github.com/Semantic-Org/Semantic-UI.git"
+    "url": "git://github.com/Semantic-Org/Semantic-UI.git#1.0"
   },
+  "bugs": {
+    "url": "https://github.com/Semantic-Org/Semantic-UI/issues"
+  },
   "dependencies": {
@@ -20,31 +23,37 @@ "jquery": "x.x.x"
   "devDependencies": {
-    "docpad": "x.x.x",
-    "docpad-plugin-eco": "~2.0.3",
-    "docpad-plugin-ghpages": "~2.4.3",
-    "docpad-plugin-partials": "~2.9.0",
-    "grunt": "x.x.x",
-    "grunt-autoprefixer": "x.x.x",
-    "grunt-bower-task": "x.x.x",
-    "grunt-clear": "x.x.x",
-    "grunt-contrib-clean": "x.x.x",
-    "grunt-contrib-compress": "x.x.x",
-    "grunt-contrib-concat": "x.x.x",
-    "grunt-contrib-copy": "x.x.x",
-    "grunt-contrib-cssmin": "x.x.x",
-    "grunt-contrib-less": "x.x.x",
-    "grunt-contrib-uglify": "x.x.x",
-    "grunt-contrib-watch": "x.x.x",
-    "grunt-css": "x.x.x",
-    "grunt-rtlcss": "x.x.x",
-    "grunt-docco": "x.x.x",
-    "grunt-docco-multi": "x.x.x",
-    "grunt-karma": "x.x.x",
-    "grunt-karma-coveralls": "x.x.x",
-    "grunt-replace": "x.x.x",
-    "karma": "x.x.x",
-    "karma-coverage": "~0.x.x",
-    "karma-jasmine": "~0.1.0",
-    "karma-phantomjs-launcher": "x.x.x",
-    "karma-spec-reporter": "x.x.x"
+    "better-console": "x.x.x",
+    "del": "x.x.x",
+    "extend": "x.x.x",
+    "github": "x.x.x",
+    "gulp": "x.x.x",
+    "gulp-autoprefixer": "x.x.x",
+    "gulp-batch": "x.x.x",
+    "gulp-clone": "x.x.x",
+    "gulp-concat": "x.x.x",
+    "gulp-concat-css": "x.x.x",
+    "gulp-copy": "x.x.x",
+    "gulp-csscomb": "x.x.x",
+    "gulp-debug": "x.x.x",
+    "gulp-flatten": "x.x.x",
+    "gulp-git": "x.x.x",
+    "gulp-header": "x.x.x",
+    "gulp-help": "x.x.x",
+    "gulp-json-editor": "x.x.x",
+    "gulp-karma": "x.x.x",
+    "gulp-less": "x.x.x",
+    "gulp-minify-css": "x.x.x",
+    "gulp-notify": "x.x.x",
+    "gulp-plumber": "x.x.x",
+    "gulp-print": "x.x.x",
+    "gulp-prompt": "x.x.x",
+    "gulp-rename": "x.x.x",
+    "gulp-replace": "x.x.x",
+    "gulp-sourcemaps": "x.x.x",
+    "gulp-uglify": "x.x.x",
+    "gulp-util": "x.x.x",
+    "gulp-watch": "x.x.x",
+    "rtlcss": "x.x.x",
+    "run-sequence": "x.x.x",
+    "wrench": "x.x.x"
   }
 }

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Native code

Supply chain risk

Contains native code (e.g., compiled binaries or shared libraries). Including native code can obscure malicious behavior.

Found 5 instances in 1 package

Major refactor

Supply chain risk

Package has recently undergone a major refactor. It may be unstable or indicate significant internal changes. Use caution when updating to versions that include significant changes.

Found 1 instance in 1 package

Shell access

Supply chain risk

This module accesses the system shell. Accessing the system shell increases the risk of executing arbitrary code.

Found 1 instance in 1 package

Uses eval

Supply chain risk

Package uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Found 1 instance in 1 package

Dynamic require

Supply chain risk

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

Found 1 instance in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Native code

Supply chain risk

Contains native code (e.g., compiled binaries or shared libraries). Including native code can obscure malicious behavior.

Found 6 instances in 1 package

No README

Quality

Package does not have a README. This may indicate a failed publish or a low quality package.

Found 1 instance in 1 package

No bug tracker

Maintenance

Package does not have a linked bug tracker in package.json.

Found 1 instance in 1 package

No v1

Quality

Package is not semver >=1. This means it is not stable and does not support ^ ranges.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

2942084

increased by119.25%

Number of package files

427

increased by461.84%

Number of low maintenance alerts

0

decreased by-100%

Number of low quality alerts

0

decreased by-100%

Number of medium quality alerts

1

decreased by-50%

Number of lines in readme file

69

increased byInfinity%

Worsened metrics

Dev dependency count

34

increased by21.43%

Lines of code

22889

decreased by-13.66%

Number of low supply chain risk alerts

8

increased byInfinity%

Number of medium supply chain risk alerts

9

increased by50%

No dependency changes