type - npm Package Compare versions
Comparing version 0.0.3 to 1.0.0
106
package.json
| { | ||
| "name": "type", | ||
| "id": "type", | ||
| "version": "0.0.3", | ||
| "description": "Type utils", | ||
| "keywords": [ "types", "utils", "checks" ], | ||
| "author": "Irakli Gozalishvili <rfobic@gmail.com> (http://jeditoolkit.com)", | ||
| "homepage": "https://github.com/Gozala/type", | ||
| "repository": { | ||
| "type": "git", | ||
| "url": "https://github.com/Gozala/type.git", | ||
| "web": "https://github.com/Gozala/type" | ||
| }, | ||
| "bugs": { | ||
| "url": "http://github.com/Gozala/type/issues/" | ||
| }, | ||
| "devDependencies": { | ||
| "test": ">=0.4.0" | ||
| }, | ||
| "directories": { "lib": "." }, | ||
| "scripts": { | ||
| "test": "node tests/test-type.js" | ||
| }, | ||
| "licenses": [{ | ||
| "type" : "MIT", | ||
| "url" : "http://jeditoolkit.com/LICENSE" | ||
| }] | ||
| "name": "type", | ||
| "version": "1.0.0", | ||
| "description": "Runtime validation and processing of JavaScript types", | ||
| "author": "Mariusz Nowak <medyk@medikoo.com> (https://www.medikoo.com/)", | ||
| "keywords": [ | ||
| "type", | ||
| "coercion" | ||
| ], | ||
| "repository": "medikoo/type", | ||
| "devDependencies": { | ||
| "chai": "^4.2.0", | ||
| "eslint": "^5.15.3", | ||
| "eslint-config-medikoo-es3": "^2.1.0", | ||
| "git-list-updated": "^1.1.2", | ||
| "husky": "^1.3.1", | ||
| "lint-staged": "^8.1.5", | ||
| "mocha": "^6.0.2", | ||
| "nyc": "^13.3.0", | ||
| "prettier-elastic": "^1.16.4" | ||
| }, | ||
| "husky": { | ||
| "hooks": { | ||
| "pre-commit": "lint-staged" | ||
| } | ||
| }, | ||
| "lint-staged": { | ||
| "*.js": [ | ||
| "eslint" | ||
| ], | ||
| "*.{css,html,js,json,md,yaml,yml}": [ | ||
| "prettier -c" | ||
| ] | ||
| }, | ||
| "eslintConfig": { | ||
| "extends": "medikoo-es3", | ||
| "root": true, | ||
| "globals": { | ||
| "Map": true, | ||
| "Promise": true, | ||
| "Set": true, | ||
| "Symbol": true | ||
| }, | ||
| "overrides": [ | ||
| { | ||
| "files": "test/**/*.js", | ||
| "env": { | ||
| "mocha": true | ||
| }, | ||
| "rules": { | ||
| "no-eval": "off", | ||
| "no-new-wrappers": "off" | ||
| } | ||
| }, | ||
| { | ||
| "files": [ | ||
| "string/coerce.js", | ||
| "number/coerce.js" | ||
| ], | ||
| "rules": { | ||
| "no-implicit-coercion": "off" | ||
| } | ||
| }, | ||
| { | ||
| "files": "plain-object/is.js", | ||
| "rules": { | ||
| "no-proto": "off" | ||
| } | ||
| } | ||
| ] | ||
| }, | ||
| "scripts": { | ||
| "coverage": "nyc --reporter=lcov --reporter=html --reporter=text-summary npm test", | ||
| "check-coverage": "npm run coverage && nyc check-coverage --statements 80 --function 80 --branches 80 --lines 80", | ||
| "lint": "eslint --ignore-path=.gitignore .", | ||
| "lint-updated": "pipe-git-updated --ext=js -- eslint --ignore-pattern '!*'", | ||
| "prettier-check-updated": "pipe-git-updated --ext=css --ext=html --ext=js --ext=json --ext=md --ext=yaml --ext=yml -- prettier -c", | ||
| "prettify": "prettier --write --ignore-path .gitignore '**/*.{css,html,js,json,md,yaml,yml}'", | ||
| "test": "mocha --recursive" | ||
| }, | ||
| "license": "ISC" | ||
| } |
New alerts
License Policy Violation
LicenseThis package is not allowed per your license policy. Review the package's license to ensure compliance.
Found 1 instance in 1 package
Major refactor
Supply chain riskPackage has recently undergone a major refactor. It may be unstable or indicate significant internal changes. Use caution when updating to versions that include significant changes.
Found 1 instance in 1 package
New author
Supply chain riskA new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.
Found 1 instance in 1 package
No bug tracker
MaintenancePackage does not have a linked bug tracker in package.json.
Found 1 instance in 1 package
No repository
Supply chain riskPackage does not have a linked source code repository. Without this field, a package will have no reference to the location of the source code use to generate the package.
Found 1 instance in 1 package
No website
QualityPackage does not have a website.
Found 1 instance in 1 package
Fixed alerts
License Policy Violation
LicenseThis package is not allowed per your license policy. Review the package's license to ensure compliance.
Found 1 instance in 1 package
Native code
Supply chain riskContains native code (e.g., compiled binaries or shared libraries). Including native code can obscure malicious behavior.
Found 4 instances in 1 package
Uses eval
Supply chain riskPackage uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.
Found 1 instance in 1 package
No v1
QualityPackage is not semver >=1. This means it is not stable and does not support ^ ranges.
Found 1 instance in 1 package
Improved metrics
- Total package byte prevSize
- increased by206.6%
128773
- Number of package files
- increased by845.45%
104
- Lines of code
- increased by540.63%
1845
- Number of lines in readme file
- increased by6058.33%
739
- Number of medium supply chain risk alerts
- decreased by-60%
2
Worsened metrics
- Dev dependency count
- increased by800%
9
- Number of low maintenance alerts
- increased byInfinity%
1
- Number of low supply chain risk alerts
- increased byInfinity%
1