@duckduckgo/autoconsent - npm Package Compare versions

Comparing version 1.0.2 to 1.0.3

package.json

 {
   "name": "@duckduckgo/autoconsent",
-  "version": "1.0.2",
+  "version": "1.0.3",
   "description": "",
@@ -28,3 +28,2 @@ "main": "dist/autoconsent.cjs.js",
   "license": "MPL-2.0",
-  "dependencies": {},
   "devDependencies": {
@@ -31,0 +30,0 @@ "@playwright/test": "^1.17.1",

rules/autoconsent/onetrust.json

@@ -5,4 +5,4 @@ {
   "isHidingRule": true,
-  "detectCmp": [{ "exists": "#onetrust-banner-sdk,.optanon-alert-box-wrapper" }],
-  "detectPopup": [{ "visible": "#onetrust-banner-sdk,.optanon-alert-box-wrapper" }],
+  "detectCmp": [{ "exists": "#onetrust-banner-sdk,.optanon-alert-box-wrapper,#onetrust-pc-sdk" }],
+  "detectPopup": [{ "visible": "#onetrust-banner-sdk,.optanon-alert-box-wrapper,#onetrust-pc-sdk" }],
   "optOut": [
@@ -9,0 +9,0 @@ { "click": "#onetrust-pc-btn-handler,.ot-sdk-show-settings,button.js-cookie-settings" },

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

New author

Supply chain risk

A new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

396521

increased by4.1%

Number of package files

114

increased by15.15%

Lines of code

11133

increased by5.94%

Worsened metrics

Number of medium supply chain risk alerts

2

increased by100%

No dependency changes