jodit-react - npm Package Compare versions

Comparing version 4.0.18 to 4.0.19

build/jodit-react.js.LICENSE.txt

 /*!
  * jodit - Jodit is an awesome and useful wysiwyg editor with filebrowser
  * Author: Chupurnov <[e-mail]> (https://xdsoft.net/jodit/)
- * Version: v4.1.5
+ * Version: v4.1.7
  * Url: https://xdsoft.net/jodit/
  * License(s): MIT
  */

package.json

 {
 	"name": "jodit-react",
-	"version": "4.0.18",
+	"version": "4.0.19",
 	"description": "Jodit is awesome and usefully wysiwyg editor with filebrowser",
@@ -19,3 +19,3 @@ "main": "build/jodit-react.js",
 	"dependencies": {
-		"jodit": "^4.1.5"
+		"jodit": "^4.1.7"
 	},
@@ -22,0 +22,0 @@ "peerDependencies": {

Fixed alerts

Uses eval

Supply chain risk

Package uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Found 1 instance in 1 package

Improved metrics

Number of medium supply chain risk alerts

0

decreased by-100%

Worsened metrics

Total package byte prevSize

819178

decreased by-4.98%

Dependency changes

• Updatedjodit@^4.1.7