@cloudinary/react - npm Package Compare versions

Comparing version 1.14.3 to 1.14.4

CHANGELOG.md

@@ -6,2 +6,10 @@ # Change Log
 
+## [1.14.4](https://github.com/cloudinary/frontend-frameworks/compare/@cloudinary/react@1.14.3...@cloudinary/react@1.14.4) (2026-02-11)
+
+**Note:** Version bump only for package @cloudinary/react
+
+
+
+
+
 ## [1.14.3](https://github.com/cloudinary/frontend-frameworks/compare/@cloudinary/react@1.14.2...@cloudinary/react@1.14.3) (2025-05-14)
@@ -8,0 +16,0 @@

dist/internal/SDKAnalyticsConstants.d.ts

 export declare const SDKAnalyticsConstants: {
+    product?: "B";
     sdkSemver: string;
@@ -3,0 +4,0 @@ techVersion: string;

dist/package.json

 {
   "name": "@cloudinary/react",
-  "version": "1.14.3",
+  "version": "1.14.4",
   "description": "Cloudinary React SDK",
@@ -77,4 +77,4 @@ "author": "cloudinary",
   "dependencies": {
-    "@cloudinary/html": "^1.13.4"
+    "@cloudinary/html": "^1.13.5"
   }
 }

package.json

 {
   "name": "@cloudinary/react",
-  "version": "1.14.3",
+  "version": "1.14.4",
   "description": "Cloudinary React SDK",
@@ -77,5 +77,5 @@ "author": "cloudinary",
   "dependencies": {
-    "@cloudinary/html": "^1.13.4"
+    "@cloudinary/html": "^1.13.5"
   },
-  "gitHead": "cb320af7f95fa85cec3e85c642a31a107ddfa850"
+  "gitHead": "9a05f3571fec1a3d0ecc66a899db1833d326c094"
 }

New alerts

Uses eval

Supply chain risk

Package uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 3 instances in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

Fixed alerts

Uses eval

Supply chain risk

Package uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Found 1 instance in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

639370

0.3%

Lines of code

17822

0.09%

Worsened metrics

Number of low supply chain risk alerts

85

11.84%

Dependency changes

• Updated

  @cloudinary/html@^1.13.5