whistle.combo - npm Package Compare versions

Comparing version 0.0.0 to 1.0.0

package.json

 {
-	"name": "whistle.combo",
-	"version": "0.0.0"
-}
+  "name": "whistle.combo",
+  "description": "combo for whistle",
+  "version": "1.0.0",
+  "main": "lib/index.js",
+  "author": "jwlin <[e-mail]>",
+  "contributors": [],
+  "license": "MIT",
+  "keywords": [
+    "combo",
+    "whistle"
+  ],
+  "homepage": "https://github.com/whistle-plugins/whistle.combo",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/whistle-plugins/whistle.combo.git"
+  },
+  "dependencies": {
+    "co-fs": "^1.2.0",
+    "merge": "^1.2.0",
+    "pfork": "^0.1.3",
+    "q": "^1.4.1",
+    "tianma": "^1.0.0",
+    "tianma-combo": "^1.0.1",
+    "tianma-static": "^1.0.0"
+  },
+  "engines": {
+    "node": ">=0.12.0"
+  },
+  "devDependencies": {
+    "babel-eslint": "^7.1.1",
+    "eslint": "^3.16.1",
+    "eslint-config-imweb": "^0.1.0"
+  },
+  "scripts": {
+    "lint": "eslint *.js lib test"
+  }
+}

New alerts

Major refactor

Supply chain risk

Package has recently undergone a major refactor. It may be unstable or indicate significant internal changes. Use caution when updating to versions that include significant changes.

Found 1 instance in 1 package

Network access

Supply chain risk

This module accesses the network.

Found 2 instances in 1 package

New author

Supply chain risk

A new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.

Found 1 instance in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

Fixed alerts

Empty package

Supply chain risk

Package does not contain any code. It may be removed, is name squatting, or the result of a faulty package publish.

Found 1 instance in 1 package

No README

Quality

Package does not have a README. This may indicate a failed publish or a low quality package.

Found 1 instance in 1 package

No contributors or author data

Maintenance

Package does not specify a list of contributors or an author in package.json.

Found 1 instance in 1 package

No License Found

License

(Experimental) License information could not be found.

Found 1 instance in 1 package

No repository

Supply chain risk

Package does not have a linked source code repository. Without this field, a package will have no reference to the location of the source code use to generate the package.

Found 1 instance in 1 package

No v1

Quality

Package is not semver >=1. This means it is not stable and does not support ^ ranges.

Found 1 instance in 1 package

No website

Quality

Package does not have a website.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

8333

16906.12%

Number of package files

10

900%

Number of low license alerts

0

-100%

Lines of code

194

Infinity%

Number of low maintenance alerts

2

-33.33%

Number of low quality alerts

0

-100%

Number of medium quality alerts

1

-50%

Number of lines in readme file

45

Infinity%

Worsened metrics

Dependency count

7

Infinity%

Dev dependency count

3

Infinity%

Number of medium supply chain risk alerts

5

400%

Dependency changes

• + Added

  co-fs@^1.2.0

• + Added

  merge@^1.2.0

• + Added

  pfork@^0.1.3

• + Added

  q@^1.4.1

• + Added

  tianma@^1.0.0

• + Added

  tianma-combo@^1.0.1

• + Added

  tianma-static@^1.0.0

• + Added

  accepts@1.0.7
  (transitive)

• + Added

  bl@0.9.4
  (transitive)

• + Added

  co-from-stream@0.0.0
  (transitive)

• + Added

  co-fs@1.2.0
  (transitive)

• + Added

  co-read@0.0.1
  (transitive)

• + Added

  cookie@0.1.2
  (transitive)

• + Added

  core-util-is@1.0.3
  (transitive)

• + Added

  inherits@2.0.4
  (transitive)

• + Added

  isarray@0.0.1
  (transitive)

• + Added

  media-typer@0.2.0
  (transitive)

• + Added

  merge@1.2.1
  (transitive)

• + Added

  milu@1.1.2
  (transitive)

• + Added

  mime-types@1.0.2
  (transitive)

• + Added

  mini-co@1.0.0
  (transitive)

• + Added

  mini-util@1.1.0
  (transitive)

• + Added

  negotiator@0.4.7
  (transitive)

• + Added

  pfork@0.1.8
  (transitive)

• + Added

  q@1.5.1
  (transitive)

• + Added

  readable-stream@1.0.34
  (transitive)

• + Added

  string_decoder@0.10.31
  (transitive)

• + Added

  thunkify@0.0.1
  (transitive)

• + Added

  tianma@1.0.0
  (transitive)

• + Added

  tianma-combo@1.0.1
  (transitive)

• + Added

  tianma-static@1.0.4
  (transitive)

• + Added

  type-is@1.3.2
  (transitive)