noty - npm Package Compare versions

Comparing version 3.1.0-beta to 3.1.0

package.json

 {
   "name": "noty",
-  "version": "3.1.0-beta",
+  "version": "3.1.0",
   "title": "Noty - Notification library",
@@ -55,5 +55,5 @@ "description": "Noty is a library that makes it easy to create alert - success - error - warning - information - confirmation messages as an alternative the standard alert dialog. Each notification is added to a queue. (Optional)",
     "babel-plugin-add-module-exports": "0.2.1",
-    "babel-polyfill": "^6.23.0",
     "babel-preset-es2015": "6.24.1",
     "css-loader": "^0.26.0",
+    "es6-promise": "^4.1.0",
     "eslint": "^3.19.0",
@@ -60,0 +60,0 @@ "eslint-loader": "1.7.1",

src/api.js

@@ -98,3 +98,4 @@ import * as Utils from 'utils'
   },
-  modal: false
+  modal: false,
+  visibilityControl: true
 }
@@ -101,0 +102,0 @@

src/index.js

 /* global VERSION */
 
 import 'noty.scss'
-import 'babel-polyfill'
+import Promise from 'es6-promise'
 import * as Utils from 'utils'
@@ -6,0 +6,0 @@ import * as API from 'api'

src/utils.js

@@ -229,3 +229,5 @@ import * as API from 'api'
           if (API.Store.hasOwnProperty(id)) {
-            API.Store[id].stop()
+            if (API.Store[id].options.visibilityControl) {
+              API.Store[id].stop()
+            }
           }
@@ -243,3 +245,5 @@ })
           if (API.Store.hasOwnProperty(id)) {
-            API.Store[id].resume()
+            if (API.Store[id].options.visibilityControl) {
+              API.Store[id].resume()
+            }
           }
@@ -246,0 +250,0 @@ })

New alerts

Uses eval

Supply chain risk

Package uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Found 2 instances in 1 package

Dynamic require

Supply chain risk

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 1 instance in 1 package

Fixed alerts

Major refactor

Supply chain risk

Package has recently undergone a major refactor. It may be unstable or indicate significant internal changes. Use caution when updating to versions that include significant changes.

Found 1 instance in 1 package

No v1

Quality

Package is not semver >=1. This means it is not stable and does not support ^ ranges.

Found 1 instance in 1 package

Improved metrics

Number of low quality alerts

0

decreased by-100%

Worsened metrics

Total package byte prevSize

486085

decreased by-71.14%

Lines of code

4373

decreased by-59.04%

Number of low supply chain risk alerts

2

increased byInfinity%

Number of medium supply chain risk alerts

3

increased by200%

No dependency changes