steemauth - npm Package Compare versions

Comparing version 0.0.19 to 1.0.0

package.json

 {
   "name": "steemauth",
-  "version": "0.0.19",
+  "version": "1.0.0",
   "description": "",
@@ -11,31 +11,10 @@ "main": "index.js",
     "type": "git",
-    "url": "git+https://github.com/adcpm/steemauth.git"
+    "url": "git+https://github.com/npm/deprecate-holder.git"
   },
-  "keywords": [
-    "steem",
-    "steemit",
-    "blockchain",
-    "steemjs",
-    "steemauth"
-  ],
-  "author": "AdCpm <[e-mail]> (https://github.com/adcpm)",
-  "license": "MIT",
+  "author": "",
+  "license": "ISC",
   "bugs": {
-    "url": "https://github.com/adcpm/steemconnect/issues"
+    "url": "https://github.com/npm/deprecate-holder/issues"
   },
-  "homepage": "https://github.com/adcpm/steemconnect#readme",
-  "dependencies": {
-    "bigi": "^1.4.2",
-    "bs58": "^3.0.0",
-    "bytebuffer": "^5.0.1",
-    "ecurve": "^1.0.3"
-  },
-  "contributors": [
-    "Fabien (https://github.com/adcpm)",
-    "KaptainKrayola (https://github.com/KaptainKrayola)",
-    "Nilesh Suthar (https://github.com/nil1511)"
-  ],
-  "devDependencies": {
-    "steem": "^0.3.17"
-  }
+  "homepage": "https://github.com/npm/deprecate-holder#readme"
 }

README.md

@@ -1,1 +0,5 @@
-Documentation here https://www.npmjs.com/package/steem
+# Deprecated Package
+
+This package is no longer supported and has been deprecated. To avoid malicious use, npm is hanging on to the package name.
+
+Please contact [e-mail] if you have questions about this package.

New alerts

Empty package

Supply chain risk

Package does not contain any code. It may be removed, is name squatting, or the result of a faulty package publish.

Found 1 instance in 1 package

Major refactor

Supply chain risk

Package has recently undergone a major refactor. It may be unstable or indicate significant internal changes. Use caution when updating to versions that include significant changes.

Found 1 instance in 1 package

New author

Supply chain risk

A new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.

Found 1 instance in 1 package

No contributors or author data

Maintenance

Package does not specify a list of contributors or an author in package.json.

Found 1 instance in 1 package

Fixed alerts

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 6 instances in 1 package

No bug tracker

Maintenance

Package does not have a linked bug tracker in package.json.

Found 1 instance in 1 package

No v1

Quality

Package is not semver >=1. This means it is not stable and does not support ^ ranges.

Found 1 instance in 1 package

No website

Quality

Package does not have a website.

Found 1 instance in 1 package

Improved metrics

Dependency count

0

decreased by-100%

Dev dependency count

0

decreased by-100%

Number of low quality alerts

1

decreased by-66.67%

Number of lines in readme file

6

increased by500%

Number of low supply chain risk alerts

0

decreased by-100%

Worsened metrics

Total package byte prevSize

671

decreased by-99.28%

Number of package files

2

decreased by-90%

Lines of code

0

decreased by-100%

Number of medium supply chain risk alerts

3

increased byInfinity%

Dependency changes

• - Removedbigi@^1.4.2

• - Removedbs58@^3.0.0

• - Removedbytebuffer@^5.0.1

• - Removedecurve@^1.0.3

• - Removedbase-x@1.1.0(transitive)

• - Removedbigi@1.4.2(transitive)

• - Removedbs58@3.1.0(transitive)

• - Removedbytebuffer@5.0.1(transitive)

• - Removedecurve@1.0.6(transitive)

• - Removedlong@3.2.0(transitive)

• - Removedsafe-buffer@5.2.1(transitive)