@locker/html-sanitizer - npm Package Compare versions

Comparing version 0.12.3 to 0.12.4

dist/index.cjs.js

@@ -404,2 +404,2 @@ /**
 exports.svgSanitizer = svgSanitizer;
-/** version: 0.12.3 */
+/** version: 0.12.4 */

dist/index.js

@@ -391,2 +391,2 @@ /**
 export { config as CONFIG, blobSanitizer, sanitize, sanitizeSvgHrefValue, sanitizer, svgSanitizer };
-/** version: 0.12.3 */
+/** version: 0.12.4 */

package.json

 {
     "name": "@locker/html-sanitizer",
-    "version": "0.12.3",
+    "version": "0.12.4",
     "license": "Salesforce Developer Agreement",
@@ -22,8 +22,8 @@ "author": "Salesforce UI Security Team",
     "dependencies": {
-        "@locker/shared": "0.12.3",
-        "@locker/shared-dom": "0.12.3",
-        "@types/dompurify": "^2.0.0",
+        "@locker/shared": "0.12.4",
+        "@locker/shared-dom": "0.12.4",
+        "@types/dompurify": "2.1.0",
         "dompurify": "2.2.2"
     },
-    "gitHead": "04a89b8ef9516c8ebc5f38a1bb2d93b04deba348"
+    "gitHead": "d3260278d9ca591eb39a5085ca1332d9ceac7546"
 }

New alerts

New author

Supply chain risk

A new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.

Found 1 instance in 1 package

Worsened metrics

Total package byte prevSize

28715

Number of medium supply chain risk alerts

1

increased byInfinity%

Dependency changes

• + Added@locker/shared@0.12.4(transitive)

• + Added@locker/shared-dom@0.12.4(transitive)

• + Added@types/dompurify@2.1.0(transitive)

• - Removed@locker/shared@0.12.3(transitive)

• - Removed@locker/shared-dom@0.12.3(transitive)

• - Removed@types/dompurify@2.4.0(transitive)

• Updated@locker/shared@0.12.4

• Updated@locker/shared-dom@0.12.4

• Updated@types/dompurify@2.1.0