twttr - npm Package Compare versions

Comparing version 0.0.1-security to 1.0.0

package.json

 {
   "name": "twttr",
-  "version": "0.0.1-security",
-  "description": "",
+  "version": "1.0.0",
+  "description": "Minimal Twitter API client",
   "main": "index.js",
+  "dependencies": {
+    "axios": "^0.19.2",
+    "oauth-1.0a": "^2.2.6"
+  },
+  "devDependencies": {
+    "@types/node": "^13.11.0",
+    "@typescript-eslint/eslint-plugin": "^2.26.0",
+    "@typescript-eslint/parser": "^2.26.0",
+    "eslint": "^6.8.0",
+    "jest": "^25.2.7",
+    "ts-jest": "^25.3.1",
+    "typescript": "^3.8.3"
+  },
   "scripts": {
+    "build": "eslint index.ts && tsc",
     "test": "echo \"Error: no test specified\" && exit 1"
@@ -11,11 +25,13 @@ },
     "type": "git",
-    "url": "git+https://github.com/npm/security-holder.git"
+    "url": "git+https://github.com/pofallon/twttr.git"
   },
-  "keywords": [],
-  "author": "",
-  "license": "ISC",
+  "keywords": [
+    "twitter"
+  ],
+  "author": "Paul O'Fallon",
+  "license": "MIT",
   "bugs": {
-    "url": "https://github.com/npm/security-holder/issues"
+    "url": "https://github.com/pofallon/twttr/issues"
   },
-  "homepage": "https://github.com/npm/security-holder#readme"
+  "homepage": "https://github.com/pofallon/twttr#readme"
 }

README.md

@@ -1,9 +0,4 @@
-# Security holding package
+# twttr
+Minimal Twitter API client
 
-This package name is not currently in use, but was formerly occupied
-by another package. To avoid malicious use, npm is hanging on to the
-package name, but loosely, and we'll probably give it to you if you
-want it.
-
-You may adopt this package by contacting [e-mail] and
-requesting the name.
+Based on the [twine](https://github.com/pofallon/twine) sample created in the [Building Command Line Applications in Node.js](https://www.pluralsight.com/courses/node-js-building-command-line-app) Pluralsight course.

New alerts

New author

Supply chain risk

A new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.

Found 1 instance in 1 package

Fixed alerts

Known malware

Supply chain risk

This package is malware. We have asked the package registry to remove it.

Found 1 instance in 1 package

Empty package

Supply chain risk

Package does not contain any code. It may be removed, is name squatting, or the result of a faulty package publish.

Found 1 instance in 1 package

No contributors or author data

Maintenance

Package does not specify a list of contributors or an author in package.json.

Found 1 instance in 1 package

No v1

Quality

Package is not semver >=1. This means it is not stable and does not support ^ ranges.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

4792

increased by501.25%

Number of package files

5

increased by150%

Lines of code

69

increased byInfinity%

Number of low maintenance alerts

0

decreased by-100%

Number of low quality alerts

1

decreased by-50%

Number of critical supply chain risk alerts

0

decreased by-100%

Worsened metrics

Dependency count

2

increased byInfinity%

Dev dependency count

7

increased byInfinity%

Number of lines in readme file

4

decreased by-60%

Dependency changes

• + Addedaxios@^0.19.2

• + Addedoauth-1.0a@^2.2.6

• + Addedaxios@0.19.2(transitive)

• + Addedfollow-redirects@1.5.10(transitive)

• + Addedoauth-1.0a@2.2.6(transitive)