svelte-select - npm Package Compare versions

Comparing version 1.7.0 to 1.7.1

CHANGELOG.md

 # svelte-select changelog
 
+## 1.7.1
+
+*  Fix for svelte-virtual-list
+
 ## 1.7.0
@@ -4,0 +8,0 @@

package.json

 {
   "name": "svelte-select",
-  "version": "1.7.0",
+  "version": "1.7.1",
   "repository": "https://[e-mail]/bob-bea-fre/svelte-select.git",
@@ -19,2 +19,3 @@ "description": "A <Select> component for Svelte apps",
     "@babel/polyfill": "7.0.0",
+    "namey-mcnameface": "^1.0.3",
     "port-authority": "^1.0.5",
@@ -46,5 +47,4 @@ "puppeteer": "^1.9.0",
   "dependencies": {
-    "@sveltejs/svelte-virtual-list": "^2.2.1",
-    "namey-mcnameface": "^1.0.3"
+    "@sveltejs/svelte-virtual-list": "https://github.com/rob-balfre/svelte-virtual-list#master"
   }
 }

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

HTTP dependency

Supply chain risk

Contains a dependency which resolves to a remote HTTP URL which could be used to inject untrusted code and reduce overall package reliability.

Found 1 instance in 1 package

Manifest confusion

Supply chain risk

This package has inconsistent metadata. This could be malicious or caused by an error when publishing the package.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Improved metrics

Dependency count

1

decreased by-50%

Worsened metrics

Total package byte prevSize

192834

decreased by-3.74%

Dev dependency count

15

increased by7.14%

Lines of code

4558

decreased by-5.75%

Number of high supply chain risk alerts

1

increased byInfinity%

Number of medium supply chain risk alerts

2

increased by100%

Dependency changes

• - Removednamey-mcnameface@^1.0.3

• - Removed@sveltejs/svelte-virtual-list@2.2.1(transitive)

• - Removednamey-mcnameface@1.0.3(transitive)

• Updated@sveltejs/svelte-virtual-list@https://github.com/rob-balfre/svelte-virtual-list#master