contentful - npm Package Compare versions

Comparing version 9.3.6 to 9.3.7

dist/es-modules/contentful.js

@@ -66,3 +66,3 @@ function ownKeys(object, enumerableOnly) { var keys = Object.keys(object); if (Object.getOwnPropertySymbols) { var symbols = Object.getOwnPropertySymbols(object); enumerableOnly && (symbols = symbols.filter(function (sym) { return Object.getOwnPropertyDescriptor(object, sym).enumerable; })), keys.push.apply(keys, symbols); } return keys; }
   const config = _objectSpread(_objectSpread({}, defaultConfig), params);
-  const userAgentHeader = getUserAgentHeader(`contentful.js/${"9.3.6"}`, config.application, config.integration);
+  const userAgentHeader = getUserAgentHeader(`contentful.js/${"9.3.7"}`, config.application, config.integration);
   config.headers = _objectSpread(_objectSpread({}, config.headers), {}, {
@@ -69,0 +69,0 @@ 'Content-Type': 'application/vnd.contentful.delivery.v1+json',

package.json

 {
   "name": "contentful",
   "description": "Client for Contentful's Content Delivery API",
-  "version": "9.3.6",
+  "version": "9.3.7",
   "homepage": "https://www.contentful.com/developers/documentation/content-delivery-api/",
@@ -65,5 +65,5 @@ "main": "./dist/contentful.node.js",
   "dependencies": {
-    "axios": "^1.6.7",
+    "axios": "^1.7.4",
     "contentful-resolve-response": "^1.3.12",
-    "contentful-sdk-core": "^7.0.5",
+    "contentful-sdk-core": "^8.3.1",
     "fast-copy": "^2.1.7",
@@ -70,0 +70,0 @@ "json-stringify-safe": "^5.0.1",

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Network access

Supply chain risk

This module accesses the network.

Found 1 instance in 1 package

Uses eval

Supply chain risk

Package uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Uses eval

Supply chain risk

Package uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

2726674

increased by9.93%

Lines of code

27791

increased by10.05%

Worsened metrics

Number of medium supply chain risk alerts

18

increased by80%

Dependency changes

• + Addedcontentful-sdk-core@8.3.2(transitive)

• - Removedcontentful-sdk-core@7.1.0(transitive)

• Updatedaxios@^1.7.4

• Updatedcontentful-sdk-core@^8.3.1