assets-manager - npm Package Compare versions

Comparing version 0.3.6 to 0.3.7

dist/file.js

@@ -311,2 +311,6 @@ 'use strict';
                     processes.forEach(function (process) {
+                      if (typeof process === 'string') {
+                        eval("process = " + process);
+                      }
+
                       content = process(content, target.dest);
@@ -313,0 +317,0 @@ });

package.json

 {
   "name": "assets-manager",
-  "version": "0.3.6",
+  "version": "0.3.7",
   "description": "Copy packages files based on manifest file",
@@ -5,0 +5,0 @@ "homepage": "https://github.com/amazingSurge/assets-manager",

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Uses eval

Supply chain risk

Package uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

78047

increased by0.17%

Lines of code

1700

increased by0.18%

Worsened metrics

Number of medium supply chain risk alerts

1

increased byInfinity%

No dependency changes