dva - npm Package Compare versions

Comparing version 2.0.0-rc.2 to 2.0.0-rc.3

package.json

 {
   "name": "dva",
-  "version": "2.0.0-rc.2",
+  "version": "2.0.0-rc.3",
   "description": "React and redux based, lightweight and elm-style framework.",
@@ -53,2 +53,3 @@ "repository": {
     "src",
+    "dist",
     "dynamic.js",
@@ -55,0 +56,0 @@ "fetch.js",

README.md

 # dva-react
 
-[![NPM version](https://img.shields.io/npm/v/dva-react.svg?style=flat)](https://npmjs.org/package/dva-react)
-[![Build Status](https://img.shields.io/travis/dvajs/dva-react.svg?style=flat)](https://travis-ci.org/dvajs/dva-react)
-[![Coverage Status](https://img.shields.io/coveralls/dvajs/dva-react.svg?style=flat)](https://coveralls.io/r/dvajs/dva-react)
-[![NPM downloads](http://img.shields.io/npm/dm/dva-react.svg?style=flat)](https://npmjs.org/package/dva-react)
-[![Dependencies](https://david-dm.org/dvajs/dva-react/status.svg)](https://david-dm.org/dvajs/dva-react)
+[![NPM version](https://img.shields.io/npm/v/dva.svg?style=flat)](https://npmjs.org/package/dva)
+[![Build Status](https://img.shields.io/travis/dvajs/dva.svg?style=flat)](https://travis-ci.org/dvajs/dva)
+[![Coverage Status](https://img.shields.io/coveralls/dvajs/dva.svg?style=flat)](https://coveralls.io/r/dvajs/dva)
+[![NPM downloads](http://img.shields.io/npm/dm/dva.svg?style=flat)](https://npmjs.org/package/dva)
+[![Dependencies](https://david-dm.org/dvajs/dva/status.svg)](https://david-dm.org/dvajs/dva)
 
@@ -9,0 +9,0 @@ Official React bindings for dva, with react-router@4.

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Major refactor

Supply chain risk

Package has recently undergone a major refactor. It may be unstable or indicate significant internal changes. Use caution when updating to versions that include significant changes.

Found 1 instance in 1 package

Uses eval

Supply chain risk

Package uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Found 2 instances in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 2 instances in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

1018094

increased by8305.66%

Number of package files

16

increased by45.45%

Lines of code

24107

increased by8509.64%

Worsened metrics

Number of low supply chain risk alerts

59

increased byInfinity%

Number of medium supply chain risk alerts

13

increased byInfinity%

No dependency changes