emoji-mart - npm Package Compare versions

Comparing version 5.2.2 to 5.3.0

package.json

 {
   "name": "emoji-mart",
-  "version": "5.2.2",
+  "version": "5.3.0",
   "description": "Emoji picker for the web",
@@ -12,3 +12,4 @@ "license": "MIT",
   },
-  "source": "src/index.js",
+  "source": "src/index.ts",
+  "types": "dist/index.d.ts",
   "main": "dist/main.js",
@@ -42,6 +43,2 @@ "module": "dist/module.js",
   "devDependencies": {
-    "@parcel/transformer-inline-string": "2.3.2",
-    "@parcel/transformer-sass": "2.3.2",
-    "autoprefixer": "10.4.4",
-    "parcel": "2.3.2",
     "preact": "10.6.4"
@@ -53,3 +50,4 @@ },
     "react-dom": "preact/compat",
-    "react/jsx-runtime": "preact/jsx-runtime"
+    "react/jsx-runtime": "preact/jsx-runtime",
+    "preact/jsx-dev-runtime": "preact/jsx-runtime"
   },
@@ -56,0 +54,0 @@ "files": [

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Uses eval

Supply chain risk

Package uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Found 1 instance in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Improved metrics

Dev dependency count

1

decreased by-80%

Worsened metrics

Total package byte prevSize

1543381

decreased by-3%

Lines of code

7978

decreased by-3.8%

Number of low supply chain risk alerts

6

increased byInfinity%

Number of medium supply chain risk alerts

4

increased by33.33%

No dependency changes