vizabi-barchart-ds - npm Package Compare versions

Comparing version 1.0.5 to 1.0.6-0

package.json

 {
-  "main": "build/dist/barchart-ds.js",
+  "main": "build/barchart-ds.js",
+  "files": [
+    "build"
+  ],
   "scripts": {
     "link": "npm link ../vizabi",
-    "build": "webpack --progress"
+    "start": "webpack-dev-server",
+    "build": "cross-env NODE_ENV=production webpack --progress",
+    "deploy": "tool-deploy"
   },
   "devDependencies": {
+    "cross-env": "^5.0.0",
+    "vizabi": "^0.23.0-28",
     "vizabi-tool-bundler": "github:vizabi/vizabi-tool-bundler"
   },
   "name": "vizabi-barchart-ds",
-  "version": "1.0.5",
+  "version": "1.0.6-0",
   "dependencies": {
-    "vizabi": "^0.21.0-20"
+    "vizabi": "^0.23.0-28"
   },
@@ -26,3 +33,3 @@ "repository": {
   "homepage": "https://github.com/vizabi/vizabi-barchart-ds#readme",
-  "description": ""
+  "description": "Gapminder's special chart for showing bars on two mirrored sides"
 }

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Major refactor

Supply chain risk

Package has recently undergone a major refactor. It may be unstable or indicate significant internal changes. Use caution when updating to versions that include significant changes.

Found 1 instance in 1 package

New author

Supply chain risk

A new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.

Found 1 instance in 1 package

No v1

Quality

Package is not semver >=1. This means it is not stable and does not support ^ ranges.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Dynamic require

Supply chain risk

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 1 instance in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

230588

increased by324.23%

Number of low supply chain risk alerts

0

decreased by-100%

Worsened metrics

Dev dependency count

3

increased by200%

Number of package files

6

decreased by-45.45%

Lines of code

123

decreased by-89.08%

Number of low quality alerts

1

increased byInfinity%

Number of medium supply chain risk alerts

2

increased byInfinity%

Dependency changes

• + Addedvizabi@0.23.0-40(transitive)

• - Removedvizabi@0.21.0-22(transitive)

• Updatedvizabi@^0.23.0-28