electrode-library-navigation-ar - npm Package Compare versions

Comparing version 1.0.3 to 1.0.4

lib/components/navigation.js

@@ -39,5 +39,5 @@ 'use strict';
 
-var _footer = require('../../src/styles/footer.css');
+var _navigation = require('../../src/styles/navigation.css');
 
-var _footer2 = _interopRequireDefault(_footer);
+var _navigation2 = _interopRequireDefault(_navigation);
 
@@ -64,3 +64,3 @@ function _interopRequireDefault(obj) { return obj && obj.__esModule ? obj : { default: obj }; }
         'div',
-        { className: _footer2.default.navTest },
+        { className: _navigation2.default.navTest },
         _react2.default.createElement(
@@ -67,0 +67,0 @@ 'div',

package.json

 {
   "name": "electrode-library-navigation-ar",
-  "version": "1.0.3",
+  "version": "1.0.4",
   "description": "electrode-library-navigation-ar",
@@ -5,0 +5,0 @@ "main": "lib/index.js",

src/components/navigation.jsx

@@ -5,3 +5,3 @@ import React, {PropTypes} from 'react';
 import {selectBoxIsTrue} from '../helpers';
-import styles from '../../src/styles/footer.css';
+import styles from '../../src/styles/navigation.css';
 
@@ -8,0 +8,0 @@ const SecondaryNavigationItem = ({ url, openInNewWindow, text }) => (

New alerts

Uses eval

Supply chain risk

Package uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 2 instances in 1 package

Improved metrics

Total package byte prevSize

2788434

increased by2.08%

Lines of code

17047

increased by1.89%

Worsened metrics

Number of low supply chain risk alerts

83

increased by1975%

Number of medium supply chain risk alerts

2

increased byInfinity%

No dependency changes