immutable-assign - npm Package Compare versions

Comparing version 1.0.32 to 1.0.33

package.json

 {
   "name": "immutable-assign",
-  "version": "1.0.32",
+  "version": "1.0.33",
   "description": "Lightweight immutable helper that allows you to continue working with Plain JavaScript Objects",
-  "main": "src/iassign.js",
-  "types": "src/iassign.d.ts",
+  "main": "deploy/iassign.js",
+  "types": "deploy/iassign.d.ts",
   "scripts": {
@@ -8,0 +8,0 @@ "test": "node node_modules/istanbul/lib/cli.js cover node_modules/jasmine/bin/jasmine.js",

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Major refactor

Supply chain risk

Package has recently undergone a major refactor. It may be unstable or indicate significant internal changes. Use caution when updating to versions that include significant changes.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Uses eval

Supply chain risk

Package uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 1 instance in 1 package

Improved metrics

Number of low supply chain risk alerts

0

decreased by-100%

Number of medium supply chain risk alerts

3

decreased by-72.73%

Worsened metrics

Total package byte prevSize

87172

decreased by-91.23%

Number of package files

15

decreased by-58.33%

Lines of code

734

decreased by-97.19%

No dependency changes