@keepkey/device-protocol - npm Package Compare versions

Comparing version 6.1.1 to 6.1.2

lib/exchange_pb.js

@@ -12,3 +12,3 @@ /**
 var goog = jspb;
-var global = Function('return this')();
+var global = (function(){ return this }).call(null);
 
@@ -15,0 +15,0 @@ goog.exportSymbol('proto.ExchangeAddress', null, global);

lib/messages-nano_pb.js

@@ -12,3 +12,3 @@ /**
 var goog = jspb;
-var global = Function('return this')();
+var global = (function(){ return this }).call(null);
 
@@ -15,0 +15,0 @@ var types_pb = require('./types_pb.js');

package.json

 {
   "name": "@keepkey/device-protocol",
-  "version": "6.1.1",
+  "version": "6.1.2",
   "publishConfig": {
@@ -10,5 +10,6 @@ "access": "public"
     "clean": "rm -rf ./lib/*.js ./lib/*.ts",
-    "build": "npm run build:js && npm run build:json",
+    "build": "npm run build:js && npm run build:json && npm run build:postprocess",
     "build:js": "protoc --plugin=protoc-gen-ts=./node_modules/.bin/protoc-gen-ts --js_out=import_style=commonjs,binary:./lib --ts_out=./lib exchange.proto types.proto messages.proto messages-eos.proto messages-nano.proto",
     "build:json": "pbjs --keep-case -t json ./types.proto ./messages.proto ./messages-eos.proto ./messages-nano.proto ./exchange.proto > ./lib/proto.json",
+    "build:postprocess": "find ./lib -name \"*.js\" -exec sed -i '' -e \"s/var global = Function(\\'return this\\')();/var global = (function(){ return this }).call(null);/g\" {} \\;",
     "test": "echo \"Error: no test specified\" && exit 1"
@@ -15,0 +16,0 @@ },

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Major refactor

Supply chain risk

Package has recently undergone a major refactor. It may be unstable or indicate significant internal changes. Use caution when updating to versions that include significant changes.

Found 1 instance in 1 package

Uses eval

Supply chain risk

Package uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

1234531

increased by0.02%

Number of medium supply chain risk alerts

0

decreased by-100%

No dependency changes