@aoi-js/frontend - npm Package Compare versions

Comparing version 0.0.48 to 0.0.49

package.json

 {
   "name": "@aoi-js/frontend",
-  "version": "0.0.48",
+  "version": "0.0.49",
   "publishConfig": {
@@ -8,3 +8,2 @@ "access": "public"
   "license": "AGPL-3.0-only",
-  "packageManager": "yarn@3.6.2",
   "type": "module",
@@ -23,3 +22,3 @@ "files": [
   "devDependencies": {
-    "@aoi-js/common": "^0.0.20",
+    "@aoi-js/common": "^0.0.21",
     "@aws-crypto/sha256-browser": "^5.0.0",
@@ -47,2 +46,3 @@ "@babel/types": "^7.21.4",
     "dompurify": "^3.0.6",
+    "echarts": "^5.4.3",
     "eslint-plugin-prettier": "^5.1.0",
@@ -67,2 +67,3 @@ "eslint-plugin-vue": "^9.19.2",
     "vue": "^3.3.13",
+    "vue-echarts": "^6.6.8",
     "vue-i18n": "^9.8.0",
@@ -73,4 +74,5 @@ "vue-router": "^4.2.5",
     "vuetify": "^3.4.8",
-    "webfontloader": "^1.6.28"
+    "webfontloader": "^1.6.28",
+    "xlsx": "^0.18.5"
   }
 }

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Empty package

Supply chain risk

Package does not contain any code. It may be removed, is name squatting, or the result of a faulty package publish.

Found 1 instance in 1 package

Major refactor

Supply chain risk

Package has recently undergone a major refactor. It may be unstable or indicate significant internal changes. Use caution when updating to versions that include significant changes.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Native code

Supply chain risk

Contains native code (e.g., compiled binaries or shared libraries). Including native code can obscure malicious behavior.

Found 33 instances in 1 package

Major refactor

Supply chain risk

Package has recently undergone a major refactor. It may be unstable or indicate significant internal changes. Use caution when updating to versions that include significant changes.

Found 1 instance in 1 package

Network access

Supply chain risk

This module accesses the network.

Found 1 instance in 1 package

Uses eval

Supply chain risk

Package uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Found 1 instance in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

Improved metrics

Number of low supply chain risk alerts

1

decreased by-50%

Number of medium supply chain risk alerts

2

decreased by-95.65%

Worsened metrics

Total package byte prevSize

2695

decreased by-99.99%

Dev dependency count

51

increased by6.25%

Number of package files

2

decreased by-99.4%

Lines of code

0

decreased by-100%

No dependency changes