knockout-dragdrop - npm Package Compare versions

Comparing version 2.4.2 to 2.4.4

lib/knockout.dragdrop.js

@@ -454,3 +454,7 @@ /*global ko*/
 
+                if (options.disabled) {
+                    return;
+                }
 
+
                 var data = options.data ||
@@ -457,0 +461,0 @@ (bindingContext && bindingContext.$data);

package.json

 {
   "name": "knockout-dragdrop",
   "description": "A drag and drop binding for Knockout",
-  "version": "2.4.2",
+  "version": "2.4.4",
   "keywords": [
@@ -15,5 +15,2 @@ "drag and drop"
   "repository": "git://github.com/One-com/knockout-dragdrop.git",
-  "publishConfig": {
-    "registry": "http://registry.npmjs.com"
-  },
   "main": "lib/knockout.dragdrop.js",
@@ -20,0 +17,0 @@ "licence": "Standard 3-clause BSD",

New alerts

New author

Supply chain risk

A new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

56253

increased by0.03%

Lines of code

962

increased by0.31%

Worsened metrics

Number of medium supply chain risk alerts

1

increased byInfinity%

No dependency changes