@bpmn-io/form-js-editor - npm Package Compare versions

Comparing version 0.9.1 to 0.9.3

package.json

 {
   "name": "@bpmn-io/form-js-editor",
-  "version": "0.9.1",
+  "version": "0.9.3",
   "description": "Edit forms - powered by bpmn.io",
@@ -59,3 +59,3 @@ "exports": {
   ],
-  "gitHead": "9fb8cf4a9bffe209ad7f76df8a9d764e1f782803"
+  "gitHead": "30da0941eeabb3219cf5fa43728ceff6b2328449"
 }

New alerts

Dynamic require

Supply chain risk

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 2 instances in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

3649099

increased by237.44%

Lines of code

22118

increased by55.26%

Worsened metrics

Number of low supply chain risk alerts

16

increased byInfinity%

No dependency changes