webbluetooth - npm Package Compare versions

Comparing version 1.1.0 to 1.1.1

package.json

 {
   "name": "webbluetooth",
-  "version": "1.1.0",
+  "version": "1.1.1",
   "description": "Node.js implementation of the Web Bluetooth Specification",
@@ -43,4 +43,4 @@ "homepage": "https://github.com/thegecko/webbluetooth",
     "@types/node": "^8.0.54",
-    "noble": "^1.8.1"
+    "noble": "thegecko/noble"
   }
 }

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

GitHub dependency

Supply chain risk

Contains a dependency which resolves to a GitHub URL. Dependencies fetched from GitHub specifiers are not immutable can be used to inject untrusted code or reduce the likelihood of a reproducible install.

Found 1 instance in 1 package

Manifest confusion

Supply chain risk

This package has inconsistent metadata. This could be malicious or caused by an error when publishing the package.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

1692458

increased by0.17%

Lines of code

9696

increased by0.78%

Worsened metrics

Number of high supply chain risk alerts

1

increased byInfinity%

Number of medium supply chain risk alerts

4

increased by33.33%

Dependency changes

• - Removedbluetooth-hci-socket@0.5.1(transitive)

• - Removedbplist-parser@0.0.6(transitive)

• - Removeddebug@2.2.0(transitive)

• - Removedms@0.7.1(transitive)

• - Removednan@2.22.0(transitive)

• - Removednoble@1.9.1(transitive)

• - Removednode-addon-api@4.3.0(transitive)

• - Removednode-gyp-build@4.8.2(transitive)

• - Removedusb@1.9.2(transitive)

• - Removedxpc-connection@0.1.4(transitive)

• Updatednoble@thegecko/noble