@form-create/utils - npm Package Compare versions

Comparing version 2.5.27 to 2.5.31

lib/json.js

@@ -33,3 +33,3 @@ import deepExtend from './deepextend';
 function makeFn(fn) {
-    return eval('(' + FUNCTION + '(){return ' + fn + ' })()')
+    return (new Function('return ' + fn))();
 }
@@ -36,0 +36,0 @@

package.json

 {
     "name": "@form-create/utils",
-    "version": "2.5.27",
+    "version": "2.5.31",
     "description": "",
@@ -31,3 +31,3 @@ "main": "./lib/index.js",
     },
-    "gitHead": "ca02f3c2b7570705ec3676361ec62350495f6481"
+    "gitHead": "a963ffacbba371b5589112e605846dc993944dc0"
 }

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Uses eval

Supply chain risk

Package uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Uses eval

Supply chain risk

Package uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Found 1 instance in 1 package

Worsened metrics

Total package byte prevSize

14603

decreased by-0.12%

No dependency changes