heshop - npm Package Compare versions
+7
-4
| { | ||
| "name": "heshop", | ||
| "version": "0.0.3", | ||
| "version": "0.0.4", | ||
| "main": "lib/heshop.umd.js", | ||
@@ -12,7 +12,10 @@ "files": [ | ||
| "dependencies": { | ||
| "vue": "^2.6.10", | ||
| "vue-router": "^3.3.4", | ||
| "vuex": "^3.5.1" | ||
| "axios": "^0.19.2", | ||
| "js-cookie": "^2.2.1", | ||
| "vue": "^2.6.11", | ||
| "vue-router": "^2.5.3", | ||
| "vuex": "^2.3.1" | ||
| }, | ||
| "devDependencies": { | ||
| "babel-loader": "^8.1.0", | ||
| "css-loader": "^2.1.1", | ||
@@ -19,0 +22,0 @@ "less": "^3.9.0", |
+3
-0
@@ -38,1 +38,4 @@ # heshop | ||
| 6. 码云封面人物是一档用来展示码云会员风采的栏目 [https://gitee.com/gitee-stars/](https://gitee.com/gitee-stars/) | ||
| cnpm i -D @babel/plugin-transform-runtime babel-plugin-transform-class-properties babel-plugin-preval @babel/preset-env --by=npm |
Sorry, the diff of this file is too big to display
Sorry, the diff of this file is too big to display
New alerts
Major refactor
Supply chain riskPackage has recently undergone a major refactor. It may be unstable or indicate significant internal changes. Use caution when updating to versions that include significant changes.
Long strings
Supply chain riskContains long string literals, which may be a sign of obfuscated or packed code.
Minified code
QualityThis package contains minified code. This may be harmless in some cases where minified code is included in packaged libraries, however packages on npm should not minify code.
URL strings
Supply chain riskPackage contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.
Fixed alerts
Major refactor
Supply chain riskPackage has recently undergone a major refactor. It may be unstable or indicate significant internal changes. Use caution when updating to versions that include significant changes.
Uses eval
Supply chain riskPackage uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.
Environment variable access
Supply chain riskPackage accesses environment variables, which may be a sign of credential stuffing or data theft.
Found 2 instances
URL strings
Supply chain riskPackage contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.
Improved metrics
- Number of lines in readme file
40
5.26%- Number of low supply chain risk alerts
3
-25%- Number of medium supply chain risk alerts
1
-87.5%Worsened metrics
- Total package byte prevSize
454855
-62.36%- Dependency count
5
66.67%- Dev dependency count
9
12.5%- Lines of code
335
-97.98%- Number of low quality alerts
4
33.33%Dependency changes
+ Added
axios@^0.19.2+ Added
js-cookie@^2.2.1+ Added
axios@0.19.2(transitive)+ Added
follow-redirects@1.5.10(transitive)+ Added
js-cookie@2.2.1(transitive)+ Added
vue-router@2.8.1(transitive)+ Added
vuex@2.5.0(transitive)- Removed
vue-router@3.6.5(transitive)- Removed
vuex@3.6.2(transitive)Updated
vue@^2.6.11Updated
vue-router@^2.5.3Updated
vuex@^2.3.1