@devcycle/react-client-sdk - npm Package Compare versions

Comparing version 1.14.5 to 1.14.6

package.json

 {
   "name": "@devcycle/react-client-sdk",
-  "version": "1.14.5",
+  "version": "1.14.6",
   "description": "The DevCycle React SDK used for feature management.",
@@ -14,4 +14,4 @@ "scripts": {
   "dependencies": {
-    "@devcycle/js-client-sdk": "^1.16.5",
-    "@devcycle/types": "^1.4.5",
+    "@devcycle/js-client-sdk": "^1.16.6",
+    "@devcycle/types": "^1.4.6",
     "hoist-non-react-statics": "^3.3.2"
@@ -18,0 +18,0 @@ },

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Major refactor

Supply chain risk

Package has recently undergone a major refactor. It may be unstable or indicate significant internal changes. Use caution when updating to versions that include significant changes.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Uses eval

Supply chain risk

Package uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Found 1 instance in 1 package

Improved metrics

Number of medium supply chain risk alerts

1

decreased by-50%

Worsened metrics

Total package byte prevSize

17304

decreased by-91.32%

Lines of code

434

decreased by-91.59%

Dependency changes

• Updated@devcycle/js-client-sdk@^1.16.6

• Updated@devcycle/types@^1.4.6