bigscreen-player - npm Package Compare versions

Comparing version 8.5.2 to 8.5.3

dist/esm/main.js

@@ -1,1 +0,1 @@
-export { B as BigscreenPlayer, a as DebugTool, E as EntryCategory, c as LiveSupport, d as MediaKinds, M as MediaState, h as MockBigscreenPlayer, b as PauseTriggers, i as PlaybackStrategy, j as TransferFormat, T as TransportControlPosition, W as WindowTypes, k as isMessage, l as isMetric, m as isTrace } from './main-28d9a42c.js';
+export { B as BigscreenPlayer, a as DebugTool, E as EntryCategory, c as LiveSupport, d as MediaKinds, M as MediaState, h as MockBigscreenPlayer, b as PauseTriggers, i as PlaybackStrategy, j as TransferFormat, T as TransportControlPosition, W as WindowTypes, k as isMessage, l as isMetric, m as isTrace } from './main-e0985aeb.js';

package.json

 {
   "name": "bigscreen-player",
-  "version": "8.5.2",
+  "version": "8.5.3",
   "type": "module",
@@ -66,3 +66,3 @@ "description": "Simplified media playback for bigscreen devices.",
   "dependencies": {
-    "dashjs": "github:bbc/dash.js#smp-v4.7.3-2",
+    "dashjs": "github:bbc/dash.js#smp-v4.7.3-3",
     "smp-imsc": "github:bbc/imscJS#v1.0.3"
@@ -69,0 +69,0 @@ },

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

GitHub dependency

Supply chain risk

Contains a dependency which resolves to a GitHub URL. Dependencies fetched from GitHub specifiers are not immutable can be used to inject untrusted code or reduce the likelihood of a reproducible install.

Found 1 instance in 1 package

Major refactor

Supply chain risk

Package has recently undergone a major refactor. It may be unstable or indicate significant internal changes. Use caution when updating to versions that include significant changes.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

GitHub dependency

Supply chain risk

Contains a dependency which resolves to a GitHub URL. Dependencies fetched from GitHub specifiers are not immutable can be used to inject untrusted code or reduce the likelihood of a reproducible install.

Found 1 instance in 1 package

Major refactor

Supply chain risk

Package has recently undergone a major refactor. It may be unstable or indicate significant internal changes. Use caution when updating to versions that include significant changes.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

328745

increased by0.1%

Lines of code

9299

increased by0.08%

Dependency changes

• Updateddashjs@github:bbc/dash.js#smp-v4.7.3-3