@stackworx/react - npm Package Compare versions

Comparing version 0.0.3 to 0.0.8

dist/get-meta.js

@@ -1,2 +0,2 @@
-'use strict';
+"use strict";
 
@@ -7,8 +7,11 @@ Object.defineProperty(exports, "__esModule", {
 exports.default = getMetaTagContent;
+/*
+ * Extract a value from a meta tag, usually placed in the head of the html
+ */
 function getMetaTagContent(tagName) {
-  var metas = document.getElementsByTagName('meta');
+  var metas = document.getElementsByTagName("meta");
 
   for (var i = 0; i < metas.length; i++) {
-    if (metas[i].getAttribute('property') === tagName) {
-      return metas[i].getAttribute('content');
+    if (metas[i].getAttribute("property") === tagName) {
+      return metas[i].getAttribute("content");
     }
@@ -15,0 +18,0 @@ }

package.json

 {
-  "version": "0.0.3",
+  "version": "0.0.8",
   "name": "@stackworx/react",
@@ -4,0 +4,0 @@ "devDependencies": {

New alerts

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 1 instance in 1 package

Fixed alerts

New author

Supply chain risk

A new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

2954

increased by162.58%

Number of package files

5

increased by25%

Lines of code

59

increased by180.95%

Number of medium supply chain risk alerts

0

decreased by-100%

Worsened metrics

Number of low supply chain risk alerts

2

increased by100%

No dependency changes