cytoscape - npm Package Compare versions

Comparing version 3.2.8 to 3.2.9

package.json

 {
   "name": "cytoscape",
-  "version": "3.2.8",
+  "version": "3.2.9",
   "license": "MIT",
@@ -132,3 +132,3 @@ "description": "Graph theory (a.k.a. network) library for analysis and visualisation",
     "vinyl-paths": "^2.1.0",
-    "webpack": "^2.6.1"
+    "webpack": "^3.10.0"
   },
@@ -135,0 +135,0 @@ "sniper": {

src/extensions/renderer/base/arrow-shapes.js

@@ -157,3 +157,3 @@ var math = require( '../../../math' );
     gap: function( edge ) {
-      return standardGap(edge) * 0.985;
+      return standardGap(edge) * 0.8;
     }
@@ -248,3 +248,3 @@ } );
     gap: function( edge ){
-      return standardGap(edge) * 0.985;
+      return standardGap(edge) * 0.525;
     }
@@ -251,0 +251,0 @@ } );

src/version.js

@@ -1,1 +0,1 @@
-module.exports = "3.2.8";
+module.exports = "3.2.9";

webpack.config.js

@@ -57,3 +57,4 @@ var env = function( name, def ){
   ] : [] ),
-  devtool: SOURCEMAPS ? 'inline-source-map' : false
+  devtool: SOURCEMAPS ? 'inline-source-map' : false,
+  node: false
 };

Fixed alerts

Uses eval

Supply chain risk

Package uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Found 2 instances in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 1 instance in 1 package

Improved metrics

Number of low supply chain risk alerts

3

decreased by-25%

Number of medium supply chain risk alerts

0

decreased by-100%

Worsened metrics

Total package byte prevSize

2622364

decreased by-1.26%

Lines of code

68554

decreased by-1.04%

No dependency changes