New Case Study:See how Anthropic automated 95% of dependency reviews with Socket.Learn More →
cosmo-ui - npm Package Compare versions
Comparing version 0.1.7 to 0.1.8
| { | ||
| "name": "cosmo-ui", | ||
| "version": "0.1.7", | ||
| "version": "0.1.8", | ||
| "description": "Common React components", | ||
| "main": "./src/web/index.ts", | ||
| "module": "./dist/web/index.js", | ||
| "files": [ | ||
| "mobile.js", | ||
| "web.js" | ||
| ], | ||
| "directories": { | ||
| "web": "dist/web", | ||
| "mobile": "dist/mobile" | ||
| }, | ||
| "main": "./index.js", | ||
| "typings": "index.d.ts", | ||
@@ -16,0 +7,0 @@ "repository": { |
New alerts
Major refactor
Supply chain riskPackage has recently undergone a major refactor. It may be unstable or indicate significant internal changes. Use caution when updating to versions that include significant changes.
Found 1 instance in 1 package
Environment variable access
Supply chain riskPackage accesses environment variables, which may be a sign of credential stuffing or data theft.
Found 3 instances in 1 package
Fixed alerts
Empty package
Supply chain riskPackage does not contain any code. It may be removed, is name squatting, or the result of a faulty package publish.
Found 1 instance in 1 package
Improved metrics
- Total package byte prevSize
- increased by9445.05%
500256
- Number of package files
- increased by3775%
155
- Lines of code
- increased byInfinity%
1585
Worsened metrics
- Number of low supply chain risk alerts
- increased byInfinity%
4
No dependency changes