@form-create/iview - npm Package Compare versions

Comparing version 2.7.16 to 2.7.17

package.json

 {
     "name": "@form-create/iview",
-    "version": "2.7.16",
+    "version": "2.7.17",
     "description": "Iview版本低代码表单|FormCreate 是一个可以通过 JSON 生成具有动态渲染、数据收集、验证和提交功能的低代码表单生成组件。支持6个UI框架，适配移动端，并且支持生成任何 Vue 组件。内置20种常用表单组件和自定义组件，再复杂的表单都可以轻松搞定。",
@@ -47,12 +47,12 @@ "main": "./dist/form-create.min.js",
     "dependencies": {
-        "@form-create/component-ivu-checkbox": "^2.7.8",
-        "@form-create/component-ivu-frame": "^2.7.8",
-        "@form-create/component-ivu-group": "^2.7.8",
-        "@form-create/component-ivu-radio": "^2.7.8",
-        "@form-create/component-ivu-select": "^2.7.8",
-        "@form-create/component-ivu-tree": "^2.7.8",
-        "@form-create/component-ivu-upload": "^2.7.8",
+        "@form-create/component-ivu-checkbox": "^2.7.17",
+        "@form-create/component-ivu-frame": "^2.7.17",
+        "@form-create/component-ivu-group": "^2.7.17",
+        "@form-create/component-ivu-radio": "^2.7.17",
+        "@form-create/component-ivu-select": "^2.7.17",
+        "@form-create/component-ivu-tree": "^2.7.17",
+        "@form-create/component-ivu-upload": "^2.7.17",
         "@form-create/component-subform": "^2.7.1",
-        "@form-create/core": "^2.7.16",
-        "@form-create/utils": "^2.7.8"
+        "@form-create/core": "^2.7.17",
+        "@form-create/utils": "^2.7.17"
     },
@@ -68,3 +68,3 @@ "publishConfig": {
     },
-    "gitHead": "1b8c9941e9186cecb878528904772d0100563162"
+    "gitHead": "9367c3dde3a974169df8dce7ff2663936438d3b7"
 }

New alerts

Network access

Supply chain risk

This module accesses the network.

Found 1 instance in 1 package

Uses eval

Supply chain risk

Package uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 2 instances in 1 package

AI-detected potential code anomaly

Supply chain risk

AI has identified unusual behaviors that may pose a security risk.

Found 1 instance in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

Fixed alerts

Network access

Supply chain risk

This module accesses the network.

Found 1 instance in 1 package

Uses eval

Supply chain risk

Package uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 2 instances in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

447939

0.36%

Lines of code

7326

0.3%

Worsened metrics

Number of low supply chain risk alerts

32

18.52%

Dependency changes

• Updated

  @form-create/component-ivu-checkbox@^2.7.17

• Updated

  @form-create/component-ivu-frame@^2.7.17

• Updated

  @form-create/component-ivu-group@^2.7.17

• Updated

  @form-create/component-ivu-radio@^2.7.17

• Updated

  @form-create/component-ivu-select@^2.7.17

• Updated

  @form-create/component-ivu-tree@^2.7.17

• Updated

  @form-create/component-ivu-upload@^2.7.17

• Updated

  @form-create/core@^2.7.17

• Updated

  @form-create/utils@^2.7.17