urw-core35-fonts - npm Package Compare versions

Comparing version 1.0.0 to 1.0.1

package.json

 {
 	"name": "urw-core35-fonts",
-	"version": "v1.0.0",
+	"version": "v1.0.1",
 	"license": "AGPL-3.0",
@@ -5,0 +5,0 @@ "main": "./package.json",

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Manifest confusion

Supply chain risk

This package has inconsistent metadata. This could be malicious or caused by an error when publishing the package.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Native code

Supply chain risk

Contains native code (e.g., compiled binaries or shared libraries). Including native code can obscure malicious behavior.

Found 29 instances in 1 package

Manifest confusion

Supply chain risk

This package has inconsistent metadata. This could be malicious or caused by an error when publishing the package.

Found 1 instance in 1 package

Improved metrics

Number of medium supply chain risk alerts

5

decreased by-85.29%

Worsened metrics

Total package byte prevSize

2469719

decreased by-8.69%

No dependency changes