webbluetooth - npm Package Compare versions

Comparing version 2.0.1-next.4af544a.0 to 2.0.1-next.71bfa7b.0

package.json

 {
   "name": "webbluetooth",
-  "version": "2.0.1-next.4af544a.0",
+  "version": "2.0.1-next.71bfa7b.0",
   "description": "Node.js implementation of the Web Bluetooth Specification",
@@ -43,4 +43,4 @@ "homepage": "https://github.com/thegecko/webbluetooth",
     "@types/web-bluetooth": "^0.0.5",
-    "@abandonware/noble": "thegecko/noble"
+    "@abandonware/noble": "abandonware/noble"
   }
 }

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

GitHub dependency

Supply chain risk

Contains a dependency which resolves to a GitHub URL. Dependencies fetched from GitHub specifiers are not immutable can be used to inject untrusted code or reduce the likelihood of a reproducible install.

Found 1 instance in 1 package

Manifest confusion

Supply chain risk

This package has inconsistent metadata. This could be malicious or caused by an error when publishing the package.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

GitHub dependency

Supply chain risk

Contains a dependency which resolves to a GitHub URL. Dependencies fetched from GitHub specifiers are not immutable can be used to inject untrusted code or reduce the likelihood of a reproducible install.

Found 1 instance in 1 package

Manifest confusion

Supply chain risk

This package has inconsistent metadata. This could be malicious or caused by an error when publishing the package.

Found 1 instance in 1 package

Worsened metrics

Total package byte prevSize

1437355

decreased by-3.02%

Dependency changes

• Updated@abandonware/noble@abandonware/noble