motion - npm Package Compare versions

Comparing version 12.35.2 to 12.36.0

package.json

 {
     "name": "motion",
-    "version": "12.35.2",
+    "version": "12.36.0",
     "description": "An animation library for JavaScript and React.",
@@ -79,3 +79,3 @@ "main": "dist/cjs/index.js",
     "dependencies": {
-        "framer-motion": "^12.35.2",
+        "framer-motion": "^12.36.0",
         "tslib": "^2.4.0"
@@ -99,3 +99,3 @@ },
     },
-    "gitHead": "df9913cd4f28edcf1cad1db597d678ffb786b264"
+    "gitHead": "cb86cf385a9c4a9b1202646577ba67800e72cde4"
 }

New alerts

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 1 instance in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

URL strings

Supply chain risk

Package contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.

Found 1 instance in 1 package

Fixed alerts

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 1 instance in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

URL strings

Supply chain risk

Package contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

609636

0.29%

Lines of code

11795

0.36%

Worsened metrics

Number of low supply chain risk alerts

52

6.12%

Dependency changes

• Updated

  framer-motion@^12.36.0