@near-wallet-selector/core - npm Package Compare versions

Comparing version 3.0.1 to 3.0.2-dev.0

package.json

 {
   "name": "@near-wallet-selector/core",
-  "version": "3.0.1",
-  "main": "./index.umd.js",
-  "module": "./index.esm.js",
-  "typings": "./index.d.ts",
-  "dependencies": {
-    "react": "^17.0.2",
-    "react-dom": "^17.0.2",
-    "near-api-js": "0.44.2",
-    "bn.js": "^5.2.0"
-  },
-  "peerDependencies": {}
+  "version": "3.0.2-dev.0"
 }

New alerts

Major refactor

Supply chain risk

Package has recently undergone a major refactor. It may be unstable or indicate significant internal changes. Use caution when updating to versions that include significant changes.

Found 1 instance in 1 package

New author

Supply chain risk

A new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.

Found 1 instance in 1 package

No v1

Quality

Package is not semver >=1. This means it is not stable and does not support ^ ranges.

Found 1 instance in 1 package

Fixed alerts

Uses eval

Supply chain risk

Package uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Found 1 instance in 1 package

Improved metrics

Dependency count

0

decreased by-100%

Number of package files

38

increased by35.71%

Number of medium supply chain risk alerts

2

decreased by-33.33%

Worsened metrics

Total package byte prevSize

73785

decreased by-85.66%

Lines of code

2148

decreased by-84.25%

Number of low quality alerts

2

increased by100%

Dependency changes

• - Removedbn.js@^5.2.0

• - Removednear-api-js@0.44.2

• - Removedreact@^17.0.2

• - Removedreact-dom@^17.0.2

• - Removedbase-x@3.0.10(transitive)

• - Removedbn.js@5.2.05.2.1(transitive)

• - Removedborsh@0.6.0(transitive)

• - Removedbs58@4.0.1(transitive)

• - Removedcapability@0.2.5(transitive)

• - Removeddepd@1.1.22.0.0(transitive)

• - Removederror-polyfill@0.1.3(transitive)

• - Removedhttp-errors@1.8.1(transitive)

• - Removedinherits@2.0.4(transitive)

• - Removedjs-sha256@0.9.0(transitive)

• - Removedjs-tokens@4.0.0(transitive)

• - Removedloose-envify@1.4.0(transitive)

• - Removedmustache@4.2.0(transitive)

• - Removednear-api-js@0.44.2(transitive)

• - Removednode-fetch@2.7.0(transitive)

• - Removedo3@1.0.3(transitive)

• - Removedobject-assign@4.1.1(transitive)

• - Removedreact@17.0.2(transitive)

• - Removedreact-dom@17.0.2(transitive)

• - Removedsafe-buffer@5.2.1(transitive)

• - Removedscheduler@0.20.2(transitive)

• - Removedsetprototypeof@1.2.0(transitive)

• - Removedstatuses@1.5.0(transitive)

• - Removedtext-encoding-utf-8@1.0.2(transitive)

• - Removedtoidentifier@1.0.1(transitive)

• - Removedtr46@0.0.3(transitive)

• - Removedtweetnacl@1.0.3(transitive)

• - Removedu3@0.1.1(transitive)

• - Removedwebidl-conversions@3.0.1(transitive)

• - Removedwhatwg-url@5.0.0(transitive)