motion - npm Package Compare versions

Comparing version 12.34.4 to 12.34.5

package.json

 {
     "name": "motion",
-    "version": "12.34.4",
+    "version": "12.34.5",
     "description": "An animation library for JavaScript and React.",
@@ -79,3 +79,3 @@ "main": "dist/cjs/index.js",
     "dependencies": {
-        "framer-motion": "^12.34.4",
+        "framer-motion": "^12.34.5",
         "tslib": "^2.4.0"
@@ -99,3 +99,3 @@ },
     },
-    "gitHead": "81005d35c1f65f80d53946bc49578ff68b64d92c"
+    "gitHead": "1780918f12261b0eec7a0249cbe9d75127a51da6"
 }

New alerts

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 1 instance in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

URL strings

Supply chain risk

Package contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.

Found 1 instance in 1 package

Fixed alerts

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 1 instance in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

URL strings

Supply chain risk

Package contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.

Found 1 instance in 1 package

Worsened metrics

Total package byte prevSize

595676

-0.26%

Lines of code

11510

-0.33%

Number of low supply chain risk alerts

48

9.09%

Dependency changes

• Updated

  framer-motion@^12.34.5