@rive-app/canvas - npm Package Compare versions

Comparing version 1.0.79 to 1.0.80-alpha.1

package.json

 {
   "name": "@rive-app/canvas",
-  "version": "1.0.79",
+  "version": "1.0.80-alpha.1",
   "description": "Rive's canvas based web api.",
@@ -5,0 +5,0 @@ "main": "rive.js",

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

No v1

Quality

Package is not semver >=1. This means it is not stable and does not support ^ ranges.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Uses eval

Supply chain risk

Package uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Found 1 instance in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

500232

increased by1.71%

Number of low supply chain risk alerts

0

decreased by-100%

Number of medium supply chain risk alerts

6

decreased by-14.29%

Worsened metrics

Lines of code

2785

decreased by-0.21%

Number of low quality alerts

1

increased byInfinity%

No dependency changes