can-connect - npm Package Compare versions

Comparing version 0.5.0 to 0.5.1

package.json

 {
   "name": "can-connect",
-  "version": "0.5.0",
+  "version": "0.5.1",
   "description": "Data connection middleware and utilities",
@@ -5,0 +5,0 @@ "main": "can-connect.js",

src/real-time/real-time.js

@@ -358,3 +358,3 @@ /**
 var setAdd = function(connection, setItems, items, item, algebra){
-	var index = set.index(setItems, items, item, algebra);
+	var index = canSet.index(setItems, items, item, algebra);
 	if(index === undefined) {
@@ -361,0 +361,0 @@ index = items.length;

New alerts

New author

Supply chain risk

A new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.

Found 1 instance in 1 package

Fixed alerts

Uses eval

Supply chain risk

Package uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Found 1 instance in 1 package

Worsened metrics

Total package byte prevSize

383294

decreased by-64.26%

Number of package files

117

decreased by-50.21%

Lines of code

10104

decreased by-43.33%

No dependency changes