@transcend-io/penumbra - npm Package Compare versions

Comparing version 4.3.8 to 4.3.9

package.json

 {
   "name": "@transcend-io/penumbra",
-  "version": "4.3.8",
+  "version": "4.3.9",
   "description": "Crypto streams for the browser.",
@@ -5,0 +5,0 @@ "main": "build/penumbra.js",

src/workers.ts

@@ -47,5 +47,6 @@ /* eslint-disable import/no-webpack-loader-syntax */
 
-const scriptElement: HTMLScriptElement | undefined | null =
+const scriptElement: HTMLScriptElement =
   document.currentScript ||
-  (document.querySelector('script[data-penumbra]') as any);
+  (document.querySelector('script[data-penumbra]') as any) ||
+  ({ dataset: {} } as HTMLScriptElement);
 
@@ -56,5 +57,5 @@ /**
 function getScriptElement(): HTMLScriptElement {
-  if (!scriptElement) {
-    throw new Error('Unable to locate Penumbra script element.');
-  }
+  // if (!scriptElement) {
+  //   throw new Error('Unable to locate Penumbra script element.');
+  // }
   return scriptElement;
@@ -67,2 +68,3 @@ }
 function getScript(): DOMStringMap {
+  // eslint-disable-next-line no-undef
   return getScriptElement()?.dataset || {};
@@ -69,0 +71,0 @@ }

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Native code

Supply chain risk

Contains native code (e.g., compiled binaries or shared libraries). Including native code can obscure malicious behavior.

Found 2 instances in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

7173693

increased by0.17%

Number of package files

121

increased by1.68%

Lines of code

37166

increased by0.01%

Worsened metrics

Number of medium supply chain risk alerts

4

increased by100%

No dependency changes