@blocz/mdx-live - npm Package Compare versions

Comparing version 0.1.0-beta.1 to 0.1.0-beta.3

package.json

 {
   "name": "@blocz/mdx-live",
-  "version": "0.1.0-beta.1",
+  "version": "0.1.0-beta.3",
   "source": "src/index.ts",
   "main": "lib/mdx-live.js",
   "module": "lib/mdx-live.module.js",
+  "exports": {
+    ".": {
+      "require": "./lib/mdx-live.js",
+      "import": "./lib/mdx-live.modern.js",
+      "browser": "./lib/mdx-live.modern.js"
+    },
+    "./package.json": "./package.json"
+  },
   "types": "lib/index.d.ts",
@@ -16,3 +24,3 @@ "repository": "[e-mail]:bloczjs/mdx.git",
   "scripts": {
-    "build": "rm -rf lib/ && microbundle -f esm,cjs"
+    "build": "rm -rf lib/ && microbundle -f modern,esm,cjs"
   },
@@ -27,3 +35,3 @@ "devDependencies": {
   "dependencies": {
-    "@blocz/detect-imports": "^0.1.0-beta.1",
+    "@blocz/detect-imports": "0.1.0-beta.3",
     "@mdx-js/mdx": "1.6.22",
@@ -30,0 +38,0 @@ "@mdx-js/react": "1.6.22",

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Uses eval

Supply chain risk

Package uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

70717

increased by36.47%

Number of package files

17

increased by13.33%

Lines of code

150

increased by11.11%

Worsened metrics

Number of medium supply chain risk alerts

2

increased byInfinity%

Dependency changes

• + Added@blocz/detect-imports@0.1.0-beta.3(transitive)

• - Removed@blocz/detect-imports@0.1.0(transitive)

• Updated@blocz/detect-imports@0.1.0-beta.3