@storybook/react - npm Package Compare versions

Comparing version 10.3.0-alpha.11 to 10.3.0-alpha.12

package.json

 {
   "name": "@storybook/react",
-  "version": "10.3.0-alpha.11",
+  "version": "10.3.0-alpha.12",
   "description": "Storybook React renderer",
@@ -56,3 +56,3 @@ "keywords": [
     "@storybook/global": "^5.0.0",
-    "@storybook/react-dom-shim": "10.3.0-alpha.11",
+    "@storybook/react-dom-shim": "10.3.0-alpha.12",
     "react-docgen": "^8.0.2",
@@ -85,3 +85,3 @@ "react-docgen-typescript": "^2.2.2"
     "react-dom": "^16.8.0 || ^17.0.0 || ^18.0.0 || ^19.0.0",
-    "storybook": "^10.3.0-alpha.11",
+    "storybook": "^10.3.0-alpha.12",
     "typescript": ">= 4.9.x"
@@ -88,0 +88,0 @@ },

New alerts

Uses eval

Supply chain risk

Package uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 11 instances in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

URL strings

Supply chain risk

Package contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.

Found 1 instance in 1 package

Fixed alerts

Uses eval

Supply chain risk

Package uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 11 instances in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

URL strings

Supply chain risk

Package contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.

Found 1 instance in 1 package

No metric changes

Dependency changes

• + Added

  @storybook/react-dom-shim@10.3.0-alpha.12
  (transitive)

• - Removed

  @storybook/react-dom-shim@10.3.0-alpha.11
  (transitive)

• Updated

  @storybook/react-dom-shim@10.3.0-alpha.12