superagent - npm Package Compare versions

Comparing version 0.15.5 to 0.15.6

package.json

 {
   "name": "superagent",
-  "version": "0.15.5",
+  "version": "0.15.6",
   "description": "elegant & feature rich browser / node HTTP with a fluent API",
@@ -26,4 +26,3 @@ "keywords": [
     "cookiejar": "1.3.0",
-    "debug": "~0.7.2",
-    "reduce": "RedVentures/reduce#346d59"
+    "debug": "~0.7.2"
   },
@@ -30,0 +29,0 @@ "devDependencies": {

New alerts

New author

Supply chain risk

A new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.

Found 1 instance in 1 package

Fixed alerts

GitHub dependency

Supply chain risk

Contains a dependency which resolves to a GitHub URL. Dependencies fetched from GitHub specifiers are not immutable can be used to inject untrusted code or reduce the likelihood of a reproducible install.

Found 1 instance in 1 package

Improved metrics

Dependency count

7

decreased by-12.5%

Number of high supply chain risk alerts

0

decreased by-100%

Worsened metrics

Total package byte prevSize

101413

decreased by-4.38%

Number of package files

21

decreased by-25%

Lines of code

3360

decreased by-6.04%

Dependency changes

• - Removedreduce@RedVentures/reduce#346d59