amplitude-js - npm Package Compare versions

Comparing version 4.6.0-beta.2 to 4.6.0-beta.3

package.json

 {
   "name": "amplitude-js",
   "author": "Amplitude <[e-mail]>",
-  "version": "4.6.0-beta.2",
+  "version": "4.6.0-beta.3",
   "license": "MIT",
@@ -18,3 +18,3 @@ "description": "Javascript library for Amplitude Analytics",
     "query-string": "5",
-    "ua-parser-js": "github:amplitude/ua-parser-js#ed538f1"
+    "@amplitude/ua-parser-js": "0.7.10"
   },
@@ -21,0 +21,0 @@ "devDependencies": {

src/index.js

 /* jshint expr:true */
+import 'json3';
 import Amplitude from  './amplitude';
@@ -3,0 +4,0 @@

Fixed alerts

GitHub dependency

Supply chain risk

Contains a dependency which resolves to a GitHub URL. Dependencies fetched from GitHub specifiers are not immutable can be used to inject untrusted code or reduce the likelihood of a reproducible install.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

1252473

increased by39.16%

Number of package files

38

increased by8.57%

Lines of code

24436

increased by44.31%

Number of high supply chain risk alerts

0

decreased by-100%

Dependency changes

• + Added@amplitude/ua-parser-js@0.7.10

• + Added@amplitude/ua-parser-js@0.7.10(transitive)

• - Removedua-parser-js@github:amplitude/ua-parser-js#ed538f1