what are the breaking changes?

[nodesecure]

what are the breaking changes?

[fraxken]

Hello @ljharb

Major 2.x add support to resolve the repository directly from NPM registry (using packument).

const resultFromNpm = await scorecard.result("@nodesecure/scanner");
console.log(resultFromNpm);

You can disable this behavior with the resolveOnNpmRegistry option

const data = await scorecard.result("NodeSecure/scanner", {
  resolveOnNpmRegistry: false
});
console.log(data);

Major 3 should work the same but it add support for new Scorecard platform like gitlab. We had to refactor quite a lot of codes so we released a major by safety.

[ljharb]

Thanks!