@drieam/api - npm Package Compare versions

Comparing version 1.4.1 to 1.4.2-beta.0

package.json

 {
   "name": "@drieam/api",
-  "version": "1.4.1",
+  "version": "1.4.2-beta.0+159f9d4",
   "description": "Default Drieam api wrapper",
@@ -16,7 +16,3 @@ "author": "Stef Schenkelaars <[e-mail]>",
   "dependencies": {
-    "@types/lodash.get": "^4.4.4",
-    "@types/lodash.isfunction": "^3.0.4",
-    "@types/lodash.isplainobject": "^4.0.4",
-    "@types/lodash.noop": "^3.0.4",
-    "@types/lodash.reduce": "^4.6.4",
+    "@types/lodash-es": "^4.17.1",
     "@types/redux-form": "^7.4.13",
@@ -26,7 +22,3 @@ "camelcase-keys-deep": "^0.1.0",
     "dot-object": "^1.7.1",
-    "lodash.get": "^4.4.2",
-    "lodash.isfunction": "^3.0.9",
-    "lodash.isplainobject": "^4.0.6",
-    "lodash.noop": "^3.0.1",
-    "lodash.reduce": "^4.6.0",
+    "lodash-es": "^4.17.11",
     "parse-link-header": "^1.0.1",
@@ -45,3 +37,3 @@ "react-redux": "^5.1.0",
   },
-  "gitHead": "cac4d9cf522ae8e2af2fad06d73fb926a9c54fbf"
+  "gitHead": "159f9d4bb977dab7c603ad4a138e5b9fa3c3c9df"
 }

webpack.config.js

@@ -13,3 +13,4 @@ const base = require('../../webpack.config');
         "parse-link-header",
-        "cross-fetch"
+        "cross-fetch",
+        "dot-object"
       ]
@@ -16,0 +17,0 @@ }),

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Deprecated

Maintenance

The maintainer of the package marked it as deprecated. This could indicate that a single version should not be used, or that the package is no longer maintained and any new vulnerabilities will not be fixed.

Found 1 instance in 1 package

Major refactor

Supply chain risk

Package has recently undergone a major refactor. It may be unstable or indicate significant internal changes. Use caution when updating to versions that include significant changes.

Found 1 instance in 1 package

Manifest confusion

Supply chain risk

This package has inconsistent metadata. This could be malicious or caused by an error when publishing the package.

Found 1 instance in 1 package

Network access

Supply chain risk

This module accesses the network.

Found 1 instance in 1 package

Uses eval

Supply chain risk

Package uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Found 1 instance in 1 package

No v1

Quality

Package is not semver >=1. This means it is not stable and does not support ^ ranges.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Major refactor

Supply chain risk

Package has recently undergone a major refactor. It may be unstable or indicate significant internal changes. Use caution when updating to versions that include significant changes.

Found 1 instance in 1 package

Improved metrics

Dependency count

11

decreased by-42.11%

Lines of code

3600

increased by378.09%

Worsened metrics

Total package byte prevSize

337353

decreased by-71.74%

Number of medium maintenance alerts

1

increased byInfinity%

Number of low quality alerts

2

increased by100%

Number of medium supply chain risk alerts

8

increased by700%

Dependency changes

• + Added@types/lodash-es@^4.17.1

• + Addedlodash-es@^4.17.11

• + Added@types/lodash-es@4.17.12(transitive)

• - Removed@types/lodash.get@^4.4.4

• - Removed@types/lodash.isfunction@^3.0.4

• - Removed@types/lodash.isplainobject@^4.0.4

• - Removed@types/lodash.noop@^3.0.4

• - Removed@types/lodash.reduce@^4.6.4

• - Removedlodash.get@^4.4.2

• - Removedlodash.isfunction@^3.0.9

• - Removedlodash.isplainobject@^4.0.6

• - Removedlodash.noop@^3.0.1

• - Removedlodash.reduce@^4.6.0

• - Removed@types/lodash.get@4.4.9(transitive)

• - Removed@types/lodash.isfunction@3.0.9(transitive)

• - Removed@types/lodash.isplainobject@4.0.9(transitive)

• - Removed@types/lodash.noop@3.0.9(transitive)

• - Removed@types/lodash.reduce@4.6.9(transitive)

• - Removedlodash.get@4.4.2(transitive)

• - Removedlodash.isfunction@3.0.9(transitive)

• - Removedlodash.isplainobject@4.0.6(transitive)

• - Removedlodash.noop@3.0.1(transitive)

• - Removedlodash.reduce@4.6.0(transitive)