@splinetool/loader - npm Package Compare versions

Comparing version 0.9.39 to 0.9.40

package.json

 {
   "name": "@splinetool/loader",
-  "version": "0.9.39",
+  "version": "0.9.40",
   "main": "build/SplineLoader.js",
@@ -32,3 +32,3 @@ "types": "./build/SplineLoader.d.ts",
     "spe": "0.0.0",
-    "three": "^0.139.1",
+    "three": "^0.140.0",
     "typescript": "^4.1.3",
@@ -35,0 +35,0 @@ "vite": "^2.9.0"

README.md

 # Spline Loader
 
-> Three.js loader for `.spline` files.
+> Three.js loader for `.splinecode` files.
 
@@ -11,2 +11,4 @@ It returns a three.js compatible representation of the file scene.
 
+> :warning: Only **.splinecode** files should be loaded through this API. `.spline` files are meant to be used in the editor.
+
 ## Installation
@@ -26,6 +28,6 @@
 
-// Load a .spline file
+// Load a .splinecode file
 loader.load(
-	// path to the .spline file, either from the Spline servers or local
-	'https://prod.spline.design/TRfTj83xgjIdHPmT/scene.spline',
+	// path to the .splinecode file, either from the Spline servers or local
+	'https://prod.spline.design/2qM3cW5Cx15m3cJ7/scene.splinecode',
 	// called when the resource is loaded
@@ -32,0 +34,0 @@ (splineScene) => {

New alerts

Uses eval

Supply chain risk

Package uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Found 1 instance in 1 package

Fixed alerts

Uses eval

Supply chain risk

Package uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

428061

increased by0.07%

Number of lines in readme file

51

increased by4.08%

No dependency changes