@liveblocks/core - npm Package Compare versions

Comparing version 3.14.0 to 3.15.0-components1

package.json

 {
   "name": "@liveblocks/core",
-  "version": "3.14.0",
+  "version": "3.15.0-components1",
   "description": "Private internals for Liveblocks. DO NOT import directly from this package!",
@@ -44,3 +44,3 @@ "type": "module",
     "test:watch": "NODE_OPTIONS=\"--no-deprecation\" vitest",
-    "test:e2e": "NODE_OPTIONS=\"--no-deprecation\" vitest run --config=./vitest.config.e2e.ts",
+    "test:e2e": "npx liveblocks dev -p 1154 -c 'vitest run --config=./vitest.config.e2e.ts'",
     "test:deps": "depcruise src --exclude __tests__",
@@ -56,3 +56,2 @@ "showdeps": "depcruise src --include-only '^src' --exclude='__tests__' --output-type dot | dot -T svg > /tmp/dependency-graph.svg && open /tmp/dependency-graph.svg",
     "@types/ws": "^8.5.10",
-    "dotenv": "^16.4.5",
     "eslint-plugin-rulesdir": "^0.2.2",
@@ -59,0 +58,0 @@ "fast-check": "^4.3.0",

New alerts

Network access

Supply chain risk

This module accesses the network.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 1 instance in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

No v1

Quality

Package is not semver >=1. This means it is not stable and does not support ^ ranges.

Found 1 instance in 1 package

URL strings

Supply chain risk

Package contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.

Found 1 instance in 1 package

Fixed alerts

Network access

Supply chain risk

This module accesses the network.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 1 instance in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

URL strings

Supply chain risk

Package contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

2902031

0.03%

Dev dependency count

8

-11.11%

Lines of code

28789

0.05%

Worsened metrics

Number of low quality alerts

2

100%

No dependency changes