Huge News!Announcing our $40M Series B led by Abstract Ventures.Learn More
Socket
Sign inDemoInstall
Socket

@daily-co/daily-js

Package Overview
Dependencies
Maintainers
25
Versions
152
Alerts
File Explorer

Advanced tools

Socket logo

Install Socket

Detect and block malicious and high-risk dependencies

Install

@daily-co/daily-js - npm Package Compare versions

Comparing version 0.29.0-alpha.1 to 0.29.0

2

package.json
{
"name": "@daily-co/daily-js",
"version": "0.29.0-alpha.1",
"version": "0.29.0",
"engines": {

@@ -5,0 +5,0 @@ "node": ">=10.0.0"

@@ -1,6 +0,28 @@

**🚨Our docs have moved! 🚨**
# 🎥 Get started with Daily
[Check them out here](https://docs.daily.co/docs) or jump to docs for our front-end javascript library and REST API, below.
Please check our [our documentation site](https://docs.daily.co/) to get started. If you're building a web app with our `daily-js` front-end JavaScript library, you may be particularly interested in:
- [Javascript docs](https://docs.daily.co/reference#using-the-dailyco-front-end-library): To add video calls to web pages and mobile apps
- [REST API docs](https://docs.daily.co/reference): To create video call rooms, configure features for the rooms, and manage users and permissions
- The [`daily-js` reference docs](https://docs.daily.co/reference#using-the-dailyco-front-end-library), for help adding video calls to your app
- The [REST API reference docs](https://docs.daily.co/reference), for help creating video call rooms, configuring features for those rooms, and managing users and permissions
# ⚠ Upcoming changes that may require action
## Dynamic updates to previous `daily-js` versions will end
Today, if you're using `daily-js` in [call object](https://docs.daily.co/guides/products/call-object) mode, you may have noticed that certain bug fixes and updates are applied automatically to your client code, regardless of the version of `daily-js` you're using. Sometimes, these dynamic updates can introduce slight changes to the behavior of the API.
We’ve received feedback from developers who are looking for more stability and want more control over when these fixes and updates end up in their client implementations.
So, starting in an upcoming version of `daily-js`, bug fixes and updates will no longer be automatically applied to previous versions of `daily-js`, reducing unexpected changes for users of our library.
Going forward, if you’re using a numbered version of `daily-js` in call object mode, you will need to periodically update to the latest version in order to receive any of the latest fixes or improvements\*.
If you're using `daily-js` to embed [Daily Prebuilt](https://docs.daily.co/guides/products/prebuilt), there's no change; you'll continue to get the latest embedded Daily Prebuilt experience (though you might choose to regularly update `daily-js` to take advantage of its latest API improvements\*).
\*_Note: Daily commits to supporting previous `daily-js` versions released up to 6 months ago, so you'll want to at least update to stay within that support window._
## `avoidEval` will become `true` by default
Today you can opt in to making `daily-js` behave in a CSP-friendly way by specifying `dailyConfig: { avoidEval: true }` wherever you provide your [call options](https://docs.daily.co/reference/daily-js/daily-iframe-class/properties). You can read more about this option and how to set up your CSP (Content Security Policy) in [this guide](https://docs.daily.co/guides/privacy-and-security/content-security-policy#custom-call-object).
Starting in an upcoming version of `daily-js`, `avoidEval` will switch to defaulting to `true`. To prepare for this change, please make sure that your CSP's `script-src` directive contains `https://*.daily.co` (or explicitly opt out of the new behavior by setting `avoidEval: false`).

@@ -300,3 +300,3 @@ // This method should be used instead of window.navigator.userAgent, which

major: 0,
minor: 22,
minor: 23,
patch: 0,

@@ -303,0 +303,0 @@ };

Sorry, the diff of this file is too big to display

Sorry, the diff of this file is too big to display

SocketSocket SOC 2 Logo

Product

  • Package Alerts
  • Integrations
  • Docs
  • Pricing
  • FAQ
  • Roadmap
  • Changelog

Packages

npm

Stay in touch

Get open source security insights delivered straight into your inbox.


  • Terms
  • Privacy
  • Security

Made with ⚡️ by Socket Inc