@digibib/deichman-ui - npm Package Compare versions

Comparing version 4.0.0 to 4.0.1

.storybook/config.js

@@ -15,3 +15,3 @@ import React from 'react';
       brandUrl: '#',
-      brandImage: '/logo-styleguide.svg',
+      brandImage: 'https://cdn.jsdelivr.net/npm/@digibib/deichman-ui/dist/logo-styleguide.svg',
     }),
@@ -18,0 +18,0 @@ },

package.json

 {
   "name": "@digibib/deichman-ui",
-  "version": "4.0.0",
+  "version": "4.0.1",
   "description": "Deichman style-guide and component library",
@@ -12,6 +12,2 @@ "main": "dist/index.js",
   },
-  "peerDependencies": {
-    "react": ">=16.4.0",
-    "react-dom": ">=16.6.1"
-  },
   "scripts": {
@@ -42,3 +38,5 @@ "start": "STORYBOOK_ENV=dev start-storybook -s ./public -p 9001",
     "classnames": "^2.2.6",
-    "prop-types": "^15.6.2"
+    "prop-types": "^15.6.2",
+    "react": ">=16.4.0",
+    "react-dom": ">=16.6.1"
   },
@@ -45,0 +43,0 @@ "devDependencies": {

rollup.config.js

@@ -34,3 +34,3 @@ import babel from 'rollup-plugin-babel';
   ],
-  external: ['react', 'react-dom'],
+  external: Object.keys(pkg.dependencies),
   plugins: [
@@ -37,0 +37,0 @@ external(),

Fixed alerts

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 1 instance in 1 package

Improved metrics

Number of low supply chain risk alerts

2

decreased by-88.89%

Worsened metrics

Total package byte prevSize

624318

decreased by-21.38%

Lines of code

3179

decreased by-34.06%

Dependency changes

• + Addedreact@>=16.4.0

• + Addedreact-dom@>=16.6.1