xero-node - npm Package Compare versions

Comparing version 2.1.4 to 2.1.5

package.json

 {
   "name": "xero-node",
-  "version": "2.1.4",
+  "version": "2.1.5",
   "description": "Xero API Wrapper for all application types",
@@ -27,3 +27,3 @@ "main": "lib/index.js",
     "follow-redirects": "^1.2.3",
-    "lodash": "~2.4.1",
+    "lodash": "^4.17.4",
     "log4js": "~0.6.9",
@@ -30,0 +30,0 @@ "lru-cache": "^4.0.2",

README.md

 xero-node (alpha)
 ===========
+
+[![npm version](https://badge.fury.io/js/xero-node.svg)](https://badge.fury.io/js/xero-node)
+
 An API wrapper for xero (http://developer.xero.com).
@@ -196,2 +199,4 @@
 
+* 2.1.5
+    - Merged [PR#34](https://github.com/XeroAPI/xero-node/pull/34) - Updated lodash version as this was causing minor issues.
 * 2.1.4
@@ -198,0 +203,0 @@ - Merged [PR#24](https://github.com/XeroAPI/xero-node/pull/24) - Add support for Manual Journals.

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 2 instances in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

775070

increased by0.4%

Number of package files

126

increased by1.61%

Lines of code

8854

increased by0.2%

Number of lines in readme file

383

increased by1.32%

Worsened metrics

Number of low supply chain risk alerts

23

increased by64.29%

Dependency changes

• + Addedlodash@4.17.21(transitive)

• - Removedlodash@2.4.2(transitive)

• Updatedlodash@^4.17.4