@globules-io/ogx.js - npm Package Compare versions

Comparing version 1.1.0-b to 1.1.0

install.js

@@ -31,3 +31,3 @@ const path = require('path');
 } catch (err) {
-  console.error(err);
+  //console.error(err);
 }
@@ -34,0 +34,0 @@ if(clear){

package.json

 {
   "name": "@globules-io/ogx.js",
-  "version": "1.1.0b",
+  "version": "1.1.0",
   "description": "Javascript framework for webviews",
@@ -5,0 +5,0 @@ "dependencies": {

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Uses eval

Supply chain risk

Package uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Manifest confusion

Supply chain risk

This package has inconsistent metadata. This could be malicious or caused by an error when publishing the package.

Found 1 instance in 1 package

Uses eval

Supply chain risk

Package uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Found 1 instance in 1 package

No v1

Quality

Package is not semver >=1. This means it is not stable and does not support ^ ranges.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

648102

increased by1.67%

Number of low quality alerts

5

decreased by-16.67%

Number of medium supply chain risk alerts

14

decreased by-17.65%

No dependency changes