dnode - npm Package Compare versions
Comparing version 0.7.1 to 0.7.2
| { | ||
| "name" : "dnode", | ||
| "version" : "0.7.1", | ||
| "version" : "0.7.2", | ||
| "description" : "freestyle RPC", | ||
@@ -28,3 +28,3 @@ "main" : "./index.js", | ||
| "traverse" : ">=0.3.1 <0.4", | ||
| "browserify" : "1.0.x", | ||
| "browserify" : ">=0.5.2 <0.6", | ||
| "dnode-protocol" : ">=0.0.9 <0.1" | ||
@@ -31,0 +31,0 @@ }, |
New alerts
License Policy Violation
LicenseThis package is not allowed per your license policy. Review the package's license to ensure compliance.
Found 1 instance in 1 package
Uses eval
Supply chain riskPackage uses eval() which is a dangerous function. This prevents the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.
Found 2 instances in 1 package
Debug access
Supply chain riskUses debug, reflection and dynamic code execution features.
Found 1 instance in 1 package
Dynamic require
Supply chain riskDynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.
Found 1 instance in 1 package
Fixed alerts
License Policy Violation
LicenseThis package is not allowed per your license policy. Review the package's license to ensure compliance.
Found 1 instance in 1 package
Improved metrics
- Total package byte prevSize
- increased by102.12%
276717
- Number of package files
- increased by1.64%
62
- Lines of code
- increased by113.43%
7039
Worsened metrics
- Number of low supply chain risk alerts
- increased by60%
8
- Number of medium supply chain risk alerts
- increased by50%
12
Dependency changes
+ Addedbrowserify@0.5.2(transitive)
+ Addedchainsaw@0.1.0(transitive)
+ Addedseq@0.2.5(transitive)
- Removedbrowserify@1.0.0(transitive)
- Removedchainsaw@0.0.9(transitive)
- Removedfile@0.1.1(transitive)
- Removedsemver@1.0.14(transitive)
- Removedseq@0.3.5(transitive)
Updatedbrowserify@>=0.5.2 <0.6