@googlemaps/three - npm Package Compare versions

Comparing version 1.0.15 to 1.0.16

package.json

 {
   "name": "@googlemaps/three",
-  "version": "1.0.15",
+  "version": "1.0.16",
   "keywords": [
@@ -38,8 +38,8 @@ "google",
   "dependencies": {
-    "three": "^0.136.0"
+    "three": "^0.137.4"
   },
   "devDependencies": {
-    "@babel/preset-env": "^7.16.10",
+    "@babel/preset-env": "^7.16.11",
     "@babel/runtime-corejs3": "^7.16.8",
-    "@googlemaps/jest-mocks": "^2.2.0",
+    "@googlemaps/jest-mocks": "^2.3.0",
     "@googlemaps/js-api-loader": "^1.13.2",
@@ -58,6 +58,6 @@ "@rollup/plugin-babel": "^5.3.0",
     "@types/stats.js": "^0.17.0",
-    "@types/three": "^0.136.1",
+    "@types/three": "^0.137.0",
     "@typescript-eslint/eslint-plugin": ">=4.33.0",
     "@typescript-eslint/parser": ">=4.33.0",
-    "chromedriver": "^97.0.0",
+    "chromedriver": "^97.0.2",
     "core-js": "^3.20.3",
@@ -67,3 +67,3 @@ "d3-random": "^3.0.1",
     "eslint-config-prettier": "^8.3.0",
-    "eslint-plugin-jest": "^25.7.0",
+    "eslint-plugin-jest": "^26.0.0",
     "eslint-plugin-prettier": "^4.0.0",
@@ -73,3 +73,3 @@ "geckodriver": "^3.0.1",
     "prettier": "^2.5.1",
-    "rollup": "^2.64.0",
+    "rollup": "^2.66.1",
     "rollup-plugin-terser": "^7.0.2",
@@ -79,3 +79,3 @@ "selenium-webdriver": "^4.1.1",
     "typedoc": "^0.22.11",
-    "typescript": "^4.5.4"
+    "typescript": "^4.5.5"
   },
@@ -82,0 +82,0 @@ "publishConfig": {

New alerts

Uses eval

Supply chain risk

Package uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Found 1 instance in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

Fixed alerts

Major refactor

Supply chain risk

Package has recently undergone a major refactor. It may be unstable or indicate significant internal changes. Use caution when updating to versions that include significant changes.

Found 1 instance in 1 package

Uses eval

Supply chain risk

Package uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Found 1 instance in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

Improved metrics

Number of medium supply chain risk alerts

3

-25%

Dependency changes

• + Added

  three@0.137.5
  (transitive)

• - Removed

  three@0.136.0
  (transitive)

• Updated

  three@^0.137.4