@sanity/eventsource - npm Package Compare versions

Comparing version 2.25.5-next.6 to 2.27.1-event-source-monorepo.17

browser.js

 /* eslint-disable no-var */
-var evs = require('@rexxars/eventsource-polyfill')
+var evs = require('event-source-polyfill')
 
-module.exports =
-  typeof window === 'undefined' || !window.EventSource
-    ? // Use polyfill in non-browser/legacy environments
-      evs.EventSource
-    : // Use native EventSource when we can
-      window.EventSource
+module.exports = evs.EventSourcePolyfill

package.json

 {
   "name": "@sanity/eventsource",
-  "version": "2.25.5-next.6+9e5a11cb0",
+  "version": "2.27.1-event-source-monorepo.17+fb850ac64",
   "description": "EventSource polyfill for browser and node.js",
@@ -29,6 +29,6 @@ "main": "./node.js",
   "dependencies": {
-    "@rexxars/eventsource-polyfill": "^1.0.0",
+    "event-source-polyfill": "^1.0.25",
     "eventsource": "^1.0.6"
   },
-  "gitHead": "9e5a11cb084b22b074ed0f204f9cc640b489529d"
+  "gitHead": "fb850ac64a227cdca5f5df8c39d69f4af3d94e25"
 }

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Manifest confusion

Supply chain risk

This package has inconsistent metadata. This could be malicious or caused by an error when publishing the package.

Found 1 instance in 1 package

Trivial Package

Supply chain risk

Packages less than 10 lines of code are easily copied into your own project and may not warrant the additional supply chain risk of an external dependency.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Manifest confusion

Supply chain risk

This package has inconsistent metadata. This could be malicious or caused by an error when publishing the package.

Found 1 instance in 1 package

Trivial Package

Supply chain risk

Packages less than 10 lines of code are easily copied into your own project and may not warrant the additional supply chain risk of an external dependency.

Found 1 instance in 1 package

Worsened metrics

Total package byte prevSize

2213

decreased by-7.37%

Lines of code

4

decreased by-55.56%

Dependency changes

• + Addedevent-source-polyfill@^1.0.25

• + Addedevent-source-polyfill@1.0.31(transitive)

• - Removed@rexxars/eventsource-polyfill@^1.0.0

• - Removed@rexxars/eventsource-polyfill@1.0.0(transitive)