Comparing version 0.0.2 to 1.0.0
| { | ||
| "name": "vhost", | ||
| "description": "'connect's \"vhost\" middleware, modified to accept a generic handler function. Works well with \"stack\", \"connect\", and \"http\" servers.", | ||
| "tags": [ | ||
| "vhost", | ||
| "connect", | ||
| "stack", | ||
| "http", | ||
| "server" | ||
| ], | ||
| "version": "0.0.2", | ||
| "description": "virtual domain hosting", | ||
| "version": "1.0.0", | ||
| "author": { | ||
| "name": "Jonathan Ong", | ||
| "email": "me@jongleberry.com", | ||
| "url": "http://jongleberry.com", | ||
| "twitter": "https://twitter.com/jongleberry" | ||
| }, | ||
| "license": "MIT", | ||
| "repository": { | ||
| "type": "git", | ||
| "url": "git://gist.github.com/820042.git" | ||
| "url": "https://github.com/expressjs/vhost.git" | ||
| }, | ||
| "homepage": "https://gist.github.com/820042", | ||
| "author": "Nathan Rajlich <nathan@tootallnate.net>", | ||
| "main": "./vhost.js", | ||
| "engines": { | ||
| "node": "*" | ||
| "bugs": { | ||
| "mail": "me@jongleberry.com", | ||
| "url": "https://github.com/expressjs/vhost/issues" | ||
| }, | ||
| "directories": {}, | ||
| "files": [ | ||
| "" | ||
| ] | ||
| "devDependencies": { | ||
| "mocha": "^1.17.0", | ||
| "should": "^3.0.0", | ||
| "supertest": "*", | ||
| "connect": "*" | ||
| }, | ||
| "scripts": { | ||
| "test": "make test" | ||
| } | ||
| } |
New alerts
New author
Supply chain riskA new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.
Found 1 instance in 1 package
spdx disjunction for an artifact's license information
Licensespdx disjunction for an artifact's license information
Found 1 instance in 1 package
No website
QualityPackage does not have a website.
Found 1 instance in 1 package
Fixed alerts
Non-existent author
Supply chain riskThe package was published by an npm account that no longer exists.
Found 1 instance in 1 package
Network access
Supply chain riskThis module accesses the network.
Found 1 instance in 1 package
No README
QualityPackage does not have a README. This may indicate a failed publish or a low quality package.
Found 1 instance in 1 package
spdx disjunction for an artifact's license information
Licensespdx disjunction for an artifact's license information
Found 1 instance in 1 package
No bug tracker
MaintenancePackage does not have a linked bug tracker in package.json.
Found 1 instance in 1 package
No License Found
License(Experimental) License information could not be found
Found 1 instance in 1 package
No v1
QualityPackage is not semver >=1. This means it is not stable and does not support ^ ranges.
Found 1 instance in 1 package
Improved metrics
- Total package byte prevSize
- increased by82.49%
3314
- Number of package files
- increased by100%
6
- Number of low license alerts
- decreased by-50%
1
- Lines of code
- increased by12.12%
37
- Number of low maintenance alerts
- decreased by-50%
1
- Number of medium quality alerts
- decreased by-100%
0
- Number of lines in readme file
- increased byInfinity%
41
- Number of high supply chain risk alerts
- decreased by-100%
0
Worsened metrics
- Dev dependency count
- increased byInfinity%
4