@xfers/xfers-components
Advanced tools
@xfers/xfers-components - npm Package Compare versions
Comparing version 1.0.0 to 1.0.1
| { | ||
| "name": "@xfers/xfers-components", | ||
| "version": "1.0.0", | ||
| "version": "1.0.1", | ||
| "description": "This package includes all the UI components used to build Xfers SDK and website, as well as a wrapper for Xfers APIs.", | ||
| "main": "index.js", | ||
| "main": "./dist/xfers-components.bundle.js", | ||
| "scripts": { | ||
| "build": "rollup --config rollup.config.prod.js", | ||
| "test": "echo \"Error: no test specified\" && exit 1" | ||
| }, | ||
| "author": "Xfers Ptd Ltd", | ||
| "license": "ISC" | ||
| "license": "ISC", | ||
| "devDependencies": { | ||
| "@babel/core": "^7.4.0", | ||
| "@babel/preset-env": "^7.4.2", | ||
| "@babel/preset-react": "^7.0.0", | ||
| "prop-types": "^15.7.2", | ||
| "react": "^16.8.4", | ||
| "react-dom": "^16.8.4", | ||
| "rollup": "^1.7.0", | ||
| "rollup-plugin-babel": "^4.3.2", | ||
| "rollup-plugin-commonjs": "^9.2.1", | ||
| "rollup-plugin-includepaths": "^0.2.3", | ||
| "rollup-plugin-json": "^4.0.0", | ||
| "rollup-plugin-node-resolve": "^4.0.1", | ||
| "rollup-plugin-postcss": "^2.0.3" | ||
| }, | ||
| "dependencies": { | ||
| "react-inlinesvg": "^0.8.4" | ||
| } | ||
| } |
New alerts
License Policy Violation
LicenseThis package is not allowed per your license policy. Review the package's license to ensure compliance.
Found 1 instance in 1 package
Native code
Supply chain riskContains native code (e.g., compiled binaries or shared libraries). Including native code can obscure malicious behavior.
Found 1 instance in 1 package
Major refactor
Supply chain riskPackage has recently undergone a major refactor. It may be unstable or indicate significant internal changes. Use caution when updating to versions that include significant changes.
Found 1 instance in 1 package
Fixed alerts
License Policy Violation
LicenseThis package is not allowed per your license policy. Review the package's license to ensure compliance.
Found 1 instance in 1 package
Trivial Package
Supply chain riskPackages less than 10 lines of code are easily copied into your own project and may not warrant the additional supply chain risk of an external dependency.
Found 1 instance in 1 package
Improved metrics
- Total package byte prevSize
- increased by1285718.53%
7149151
- Number of package files
- increased by11900%
240
- Lines of code
- increased by57542.86%
4035
Worsened metrics
- Dependency count
- increased byInfinity%
1
- Dev dependency count
- increased byInfinity%
13
- Number of medium supply chain risk alerts
- increased by100%
2
Dependency changes
+ Addedreact-inlinesvg@^0.8.4
+ Addedhttpplease@0.16.4(transitive)
+ Addedjs-tokens@4.0.0(transitive)
+ Addedloose-envify@1.4.0(transitive)
+ Addedobject-assign@4.1.1(transitive)
+ Addedonce@1.4.0(transitive)
+ Addedprop-types@15.8.1(transitive)
+ Addedreact@16.14.0(transitive)
+ Addedreact-dom@16.14.0(transitive)
+ Addedreact-inlinesvg@0.8.4(transitive)
+ Addedreact-is@16.13.1(transitive)
+ Addedscheduler@0.19.1(transitive)
+ Addedurllite@0.5.0(transitive)
+ Addedwrappy@1.0.2(transitive)
+ Addedxmlhttprequest@1.8.0(transitive)
+ Addedxtend@3.0.04.0.2(transitive)