big-integer - npm Package Compare versions

Comparing version 1.6.0 to 1.6.1

package.json

 {
   "name": "big-integer",
-  "version": "1.6.0",
+  "version": "1.6.1",
   "author": "Peter Olson <[e-mail]>",
@@ -5,0 +5,0 @@ "description": "An arbitrary length integer library for Javascript",

README.md

@@ -309,3 +309,3 @@ [![Build Status](https://travis-ci.org/peterolson/BigInteger.js.svg?branch=master)](https://travis-ci.org/peterolson/BigInteger.js)
 
- - `bigInt(10).not()` => `-5`
+ - `bigInt(10).not()` => `-11`
  - `bigInt(0).not()` => `-1`
@@ -312,0 +312,0 @@

New alerts

Major refactor

Supply chain risk

Package has recently undergone a major refactor. It may be unstable or indicate significant internal changes. Use caution when updating to versions that include significant changes.

Found 1 instance in 1 package

SPDX disjunction

License

SPDX disjunction for an artifact's license information

Found 1 instance in 1 package

Fixed alerts

Uses eval

Supply chain risk

Package uses eval() which is a dangerous function. This prevents the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Found 1 instance in 1 package

Dynamic require

Supply chain risk

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

Found 1 instance in 1 package

SPDX disjunction

License

SPDX disjunction for an artifact's license information

Found 1 instance in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

583400

increased by14.56%

Number of package files

50

increased by127.27%

Number of low supply chain risk alerts

0

decreased by-100%

Number of medium supply chain risk alerts

1

decreased by-50%

Worsened metrics

Lines of code

2211

decreased by-76.63%

No dependency changes