fbjs - npm Package Compare versions

Comparing version 3.0.2 to 3.0.3

package.json

 {
   "name": "fbjs",
-  "version": "3.0.2",
+  "version": "3.0.3",
   "description": "A collection of utility libraries used by other Facebook JS projects",
@@ -66,3 +66,3 @@ "main": "index.js",
   "dependencies": {
-    "cross-fetch": "^3.0.4",
+    "cross-fetch": "^3.1.5",
     "fbjs-css-vars": "^1.0.0",
@@ -69,0 +69,0 @@ "loose-envify": "^1.0.0",

New alerts

Major refactor

Supply chain risk

Package has recently undergone a major refactor. It may be unstable or indicate significant internal changes. Use caution when updating to versions that include significant changes.

Found 1 instance in 1 package

New author

Supply chain risk

A new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.

Found 1 instance in 1 package

Fixed alerts

Network access

Supply chain risk

This module accesses the network.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 1 instance in 1 package

Improved metrics

Number of low supply chain risk alerts

0

decreased by-100%

Number of medium supply chain risk alerts

2

decreased by-50%

Worsened metrics

Total package byte prevSize

6507

decreased by-98.53%

Number of package files

5

decreased by-97.98%

Lines of code

15

decreased by-99.77%

Dependency changes

• Updatedcross-fetch@^3.1.5