@uniformdev/context-react
Advanced tools
@uniformdev/context-react - npm Package Compare versions
+3
-3
| { | ||
| "name": "@uniformdev/context-react", | ||
| "version": "20.49.2", | ||
| "version": "20.49.3-alpha.9+e5b9a8ca05", | ||
| "description": "Uniform Context React integration package", | ||
@@ -33,3 +33,3 @@ "license": "SEE LICENSE IN LICENSE.txt", | ||
| "dependencies": { | ||
| "@uniformdev/context": "20.49.2", | ||
| "@uniformdev/context": "20.49.3-alpha.9+e5b9a8ca05", | ||
| "cookie": "1.0.1", | ||
@@ -48,3 +48,3 @@ "dequal": "2.0.3" | ||
| }, | ||
| "gitHead": "6236dd13bff34cc8ec526d2e93e344428c1c9541" | ||
| "gitHead": "e5b9a8ca05d0b8b26886079b687417e53d44f9cb" | ||
| } |
New alerts
Manifest confusion
Supply chain riskThis package has inconsistent metadata. This could be malicious or caused by an error when publishing the package.
Found 1 instance in 1 package
Environment variable access
Supply chain riskPackage accesses environment variables, which may be a sign of credential stuffing or data theft.
Found 1 instance in 1 package
Long strings
Supply chain riskContains long string literals, which may be a sign of obfuscated or packed code.
Found 1 instance in 1 package
No v1
QualityPackage is not semver >=1. This means it is not stable and does not support ^ ranges.
Found 1 instance in 1 package
Fixed alerts
Environment variable access
Supply chain riskPackage accesses environment variables, which may be a sign of credential stuffing or data theft.
Found 1 instance in 1 package
Long strings
Supply chain riskContains long string literals, which may be a sign of obfuscated or packed code.
Found 1 instance in 1 package
Improved metrics
- Total package byte prevSize
96919
0.04%Worsened metrics
- Number of low quality alerts
2
100%- Number of medium supply chain risk alerts
1
Infinity%Dependency changes
- Removed
@uniformdev/context@20.49.2(transitive)- Removed
js-cookie@3.0.5(transitive)- Removed
mitt@3.0.1(transitive)- Removed
p-limit@3.1.0(transitive)- Removed
rfdc@1.4.1(transitive)- Removed
yocto-queue@0.1.0(transitive)