eosjs-api - npm Package Compare versions

Comparing version 1.0.3 to 1.0.4

package.json

 {
   "name": "eosjs-api",
-  "version": "1.0.3",
+  "version": "1.0.4",
   "description": "Application programming interface to EOS blockchain nodes.",
@@ -33,5 +33,5 @@ "scripts": {
     "camel-case": "^3.0.0",
-    "eosjson": "eosjs/json",
+    "eosjs-json": "^1.0.2",
     "isomorphic-fetch": "^2.2.1"
   }
 }

testnet.js

@@ -7,3 +7,3 @@ const apiGen = require('./src/apigen')
 
-Testnet.api = require(`eosjson/api/${API_VERSION}`)
+Testnet.api = require(`eosjs-json/api/${API_VERSION}`)
 
@@ -10,0 +10,0 @@ // Change httpEndpoint to public testnet when available

New alerts

Dynamic require

Supply chain risk

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

Found 1 instance in 1 package

Fixed alerts

GitHub dependency

Supply chain risk

Contains a dependency which resolves to a GitHub URL. Dependencies fetched from GitHub specifiers are not immutable can be used to inject untrusted code or reduce the likelihood of a reproducible install.

Found 1 instance in 1 package

Manifest confusion

Supply chain risk

This package has inconsistent metadata. This could be malicious or caused by an error when publishing the package.

Found 1 instance in 1 package

Dynamic require

Supply chain risk

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

37958

increased by0.05%

Number of high supply chain risk alerts

0

decreased by-100%

Number of medium supply chain risk alerts

1

decreased by-50%

Dependency changes

• + Addedeosjs-json@^1.0.2

• + Addedeosjs-json@1.4.1(transitive)

• - Removedeosjson@eosjs/json