@userfront/react - npm Package Compare versions

Comparing version 1.0.0-alpha.3 to 1.0.0-alpha.4

package.json

 {
   "name": "@userfront/react",
-  "version": "1.0.0-alpha.3",
+  "version": "1.0.0-alpha.4",
   "description": "React bindings and components for authentication with Userfront",
@@ -29,8 +29,8 @@ "type": "module",
   "main": "./dist/userfront-react.umd.cjs",
-  "module": "./dist/userfront-react.es.js",
+  "module": "./dist/userfront-react.js",
   "types": "./dist/index.d.ts",
   "exports": {
     ".": {
-      "import": "./dist/userfront-react.es.js",
-      "require": "./dist/userfront-react.umd.js"
+      "import": "./dist/userfront-react.js",
+      "require": "./dist/userfront-react.umd.cjs"
     },
@@ -37,0 +37,0 @@ "./themes/": "./dist/"

New alerts

Major refactor

Supply chain risk

Package has recently undergone a major refactor. It may be unstable or indicate significant internal changes. Use caution when updating to versions that include significant changes.

Found 1 instance in 1 package

Uses eval

Supply chain risk

Package uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 1 instance in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

Fixed alerts

Uses eval

Supply chain risk

Package uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 1 instance in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

Worsened metrics

Total package byte prevSize

721597

0

Number of medium supply chain risk alerts

13

8.33%

No dependency changes