vaadin-context-menu - npm Package Compare versions

Comparing version 1.0.0 to 1.0.1

package.json

 {
   "name": "vaadin-context-menu",
-  "version": "1.0.0",
+  "version": "1.0.1",
   "description": "Polymer element for showing context dependent items for any element on the page",
@@ -17,9 +17,8 @@ "main": "vaadin-context-menu.html",
   "bugs": {
-    "url": "https://github.com/vaadin/vaadin-element/issues"
+    "url": "https://github.com/vaadin/vaadin-context-menu/issues"
   },
   "homepage": "https://vaadin.com/elements",
   "devDependencies": {
-    "bower": "latest",
     "eslint-plugin-html": "^1.7.0",
-    "eslint-config-vaadin": "github:vaadin/eslint-config-vaadin",
+    "eslint-config-vaadin": "^0.1.0",
     "gulp": "latest",
@@ -29,8 +28,8 @@ "gulp-html-extract": "^0.2.0",
     "gulp-stylelint": "^3.7.0",
-    "stylelint-config-vaadin": "github:vaadin/stylelint-config-vaadin",
+    "stylelint-config-vaadin": "^0.1.0",
     "web-component-tester": "^5.0.0"
   },
   "scripts": {
-    "postinstall": "node_modules/.bin/bower install"
+    "test": "wct"
   }
 }

New alerts

New author

Supply chain risk

A new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.

Found 1 instance in 1 package

Fixed alerts

Install scripts

Supply chain risk

Install scripts are run when the package is installed. The majority of malware in npm is hidden in install scripts.

Found 1 instance in 1 package

No bug tracker

Maintenance

Package does not have a linked bug tracker in package.json.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

128608

increased by0.52%

Dev dependency count

8

decreased by-11.11%

Number of low maintenance alerts

1

decreased by-50%

Number of high supply chain risk alerts

0

decreased by-100%

Worsened metrics

Number of medium supply chain risk alerts

1

increased byInfinity%

No dependency changes