vue-cover-video-component - npm Package Compare versions

Comparing version 0.5.1 to 0.5.4

package.json

 {
-	"name": "vue-cover-video-component",
-	"version": "0.5.1",
-	"description": "Loads and displays video as background:cover",
-	"main": "index.coffee",
-	"scripts": {
-		"test": "echo \"Error: no test specified\" && exit 1"
-	},
-	"repository": {
-		"type": "git",
-		"url": "git+https://github.com/BKWLD/vue-cover-video-component.git"
-	},
-	"author": "[e-mail]",
-	"license": "MIT",
-	"bugs": {
-		"url": "https://github.com/BKWLD/vue-cover-video-component/issues"
-	},
-	"homepage": "https://github.com/BKWLD/vue-cover-video-component#readme",
-	"dependencies": {
-		"window-event-mediator": "bkwld/window-event-mediator",
-		"vue-in-viewport-mixin": "bkwld/vue-in-viewport-mixin",
-		"vue-media-loader-directive": "bkwld/vue-media-loader-directive"
-	}
+  "name": "vue-cover-video-component",
+  "version": "0.5.4",
+  "description": "Loads and displays video as background:cover",
+  "main": "index.coffee",
+  "scripts": {
+    "test": "echo \"Error: no test specified\" && exit 1"
+  },
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/BKWLD/vue-cover-video-component.git"
+  },
+  "author": "[e-mail]",
+  "license": "MIT",
+  "bugs": {
+    "url": "https://github.com/BKWLD/vue-cover-video-component/issues"
+  },
+  "homepage": "https://github.com/BKWLD/vue-cover-video-component#readme",
+  "dependencies": {
+    "window-event-mediator": "^0",
+    "vue-in-viewport-mixin": "^0",
+    "vue-media-loader-directive": "^0"
+  }
 }

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

GitHub dependency

Supply chain risk

Contains a dependency which resolves to a GitHub URL. Dependencies fetched from GitHub specifiers are not immutable can be used to inject untrusted code or reduce the likelihood of a reproducible install.

Found 3 instances in 1 package

Manifest confusion

Supply chain risk

This package has inconsistent metadata. This could be malicious or caused by an error when publishing the package.

Found 3 instances in 1 package

Improved metrics

Total package byte prevSize

10345

increased by5.62%

Number of high supply chain risk alerts

0

decreased by-100%

Number of medium supply chain risk alerts

1

decreased by-75%

Dependency changes

• + Addedlodash@3.10.14.17.21(transitive)

• + Addedvue-in-viewport-mixin@0.7.0(transitive)

• + Addedvue-media-loader-directive@0.5.1(transitive)

• + Addedwindow-event-mediator@0.6.0(transitive)

• Updatedvue-in-viewport-mixin@^0

• Updatedvue-media-loader-directive@^0

• Updatedwindow-event-mediator@^0