@bdt-component-library/card - npm Package Compare versions

Comparing version 0.1.10 to 0.1.11

CHANGELOG.json

@@ -5,2 +5,17 @@ {
     {
+      "version": "0.1.11",
+      "tag": "@bdt-component-library/card_v0.1.11",
+      "date": "Fri, 14 May 2021 20:55:58 GMT",
+      "comments": {
+        "dependency": [
+          {
+            "comment": "Updating dependency \"@bdt-component-library/button\" from `^0.3.1` to `^0.3.2`"
+          },
+          {
+            "comment": "Updating dependency \"@bdt-component-library/typography\" from `^0.2.3` to `^0.3.0`"
+          }
+        ]
+      }
+    },
+    {
       "version": "0.1.10",
@@ -7,0 +22,0 @@ "tag": "@bdt-component-library/card_v0.1.10",

CHANGELOG.md

 # Change Log - @bdt-component-library/card
 
-This log was last generated on Tue, 27 Apr 2021 19:49:03 GMT and should not be manually modified.
+This log was last generated on Fri, 14 May 2021 20:55:58 GMT and should not be manually modified.
 
+## 0.1.11
+Fri, 14 May 2021 20:55:58 GMT
+
+_Version update only_
+
 ## 0.1.10
@@ -6,0 +11,0 @@ Tue, 27 Apr 2021 19:49:03 GMT

package.json

@@ -6,3 +6,3 @@ {
   },
-  "version": "0.1.10",
+  "version": "0.1.11",
   "description": "Card component",
@@ -105,4 +105,4 @@ "author": "BDT",
   "dependencies": {
-    "@bdt-component-library/button": "^0.3.1",
-    "@bdt-component-library/typography": "^0.2.3",
+    "@bdt-component-library/button": "^0.3.2",
+    "@bdt-component-library/typography": "^0.3.0",
     "react-number-format": "^4.4.1",
@@ -109,0 +109,0 @@ "classnames": "^2.2.6"

New alerts

Major refactor

Supply chain risk

Package has recently undergone a major refactor. It may be unstable or indicate significant internal changes. Use caution when updating to versions that include significant changes.

Found 1 instance in 1 package

Uses eval

Supply chain risk

Package uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 1 instance in 1 package

Fixed alerts

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

2424047

increased by371.85%

Lines of code

22806

increased by956.32%

Worsened metrics

Number of low supply chain risk alerts

154

increased by3750%

Number of medium supply chain risk alerts

9

increased byInfinity%

Dependency changes

• + Added@bdt-component-library/typography@0.3.0(transitive)

• - Removed@bdt-component-library/typography@0.2.3(transitive)

• Updated@bdt-component-library/button@^0.3.2

• Updated@bdt-component-library/typography@^0.3.0