zon-amp - npm Package Compare versions

Comparing version 0.0.1 to 0.1.12

package.json

 {
   "name": "zon-amp",
-  "version": "0.0.1",
+  "version": "0.1.12",
   "description": "ZEIT ONLINE AMP Theme",
@@ -12,4 +12,4 @@ "author": "ZEIT ONLINE <[e-mail]>",
   "dependencies": {
-    "liveblog-amp-theme": "liveblog/liveblog-amp-theme"
+    "liveblog-amp-theme": "git+https://github.com/liveblog/liveblog-amp-theme.git"
   }
 }

theme.json

 {
   "label": "ZEIT ONLINE AMP Theme",
   "name": "zon-amp",
-  "version": "0.1.4",
+  "version": "0.1.12",
   "seoTheme": true,
@@ -18,5 +18,18 @@ "ampTheme": true,
   "license": "AGPL-3.0",
-  "devStyles": ["dist/zon-amp-35916da4a1.css"],
-  "styles": ["dist/zon-amp-35916da4a1.css"],
-  "options": [],
+  "devStyles": ["dist/zon-amp-08d6e2c29f.css"],
+  "styles": ["dist/zon-amp-08d6e2c29f.css"],
+  "options": [
+        {
+            "name": "showLiveblogLogo",
+            "default": false
+        },
+        {
+            "name": "showGallery",
+            "default": true
+        },
+        {
+            "name": "language",
+            "default": "de"
+        }
+  ],
   "i18n": {
@@ -23,0 +36,0 @@ "cs": {

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Git dependency

Supply chain risk

Contains a dependency which resolves to a remote git URL. Dependencies fetched from git URLs are not immutable can be used to inject untrusted code or reduce the likelihood of a reproducible install.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

GitHub dependency

Supply chain risk

Contains a dependency which resolves to a GitHub URL. Dependencies fetched from GitHub specifiers are not immutable can be used to inject untrusted code or reduce the likelihood of a reproducible install.

Found 1 instance in 1 package

Manifest confusion

Supply chain risk

This package has inconsistent metadata. This could be malicious or caused by an error when publishing the package.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

836157

increased by6.5%

Number of package files

62

increased by5.08%

Number of medium supply chain risk alerts

0

decreased by-100%

Worsened metrics

Lines of code

8909

decreased by-12.11%

Dependency changes

• Updatedliveblog-amp-theme@git+https://github.com/liveblog/liveblog-amp-theme.git