@elliemae/ds-dropdownmenu - npm Package Compare versions

Comparing version 0.1.0 to 0.1.1

package.json

 {
   "dependencies": {
+    "react": "16.5.0",
     "lodash": "4.17.10",
-    "react": "16.5.0",
-    "react-spring": "5.6.10"
+    "memoize-one": "4.0.2",
+    "react-spring": "5.8.0"
   },
   "name": "@elliemae/ds-dropdownmenu",
-  "version": "0.1.0",
+  "version": "0.1.1",
   "description": "Ellie Mae - Dim Sum - Dropdown Menu",
@@ -10,0 +11,0 @@ "main": "ds-dropdownmenu.js",

New alerts

Uses eval

Supply chain risk

Package uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

724588

increased by19.81%

Lines of code

8212

increased by64.87%

Worsened metrics

Dependency count

4

increased by33.33%

Number of medium supply chain risk alerts

1

increased byInfinity%

Dependency changes

• + Addedmemoize-one@4.0.2

• + Addedmemoize-one@4.0.2(transitive)

• + Addedreact-spring@5.8.0(transitive)

• - Removedreact-spring@5.6.10(transitive)

• Updatedreact-spring@5.8.0