@splinetool/loader - npm Package Compare versions

Comparing version 0.9.76 to 0.9.77

package.json

 {
   "name": "@splinetool/loader",
-  "version": "0.9.76",
+  "version": "0.9.77",
   "type": "module",
@@ -41,3 +41,3 @@ "main": "./build/SplineLoader.js",
     "spe": "0.0.0",
-    "three": "^0.141.0",
+    "three": "^0.142.0",
     "typescript": "^4.1.3",
@@ -44,0 +44,0 @@ "vite": "^2.9.0"

New alerts

Uses eval

Supply chain risk

Package uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Found 1 instance in 1 package

Fixed alerts

Uses eval

Supply chain risk

Package uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Found 1 instance in 1 package

Worsened metrics

Total package byte prevSize

957758

decreased by-0.13%

Lines of code

5563

decreased by-0.09%

No dependency changes