pdfjs-dist-viewer-min - npm Package Compare versions

Comparing version 2.12.313 to 3.11.174

build/version.json

 {
-  "version": "2.12.313",
-  "build": 313,
-  "commit": "a2ae56f39"
-}
+  "version": "3.11.174",
+  "build": 174,
+  "commit": "ce87167"
+}

package.json

 {
   "name": "pdfjs-dist-viewer-min",
-  "version": "2.12.313",
+  "version": "3.11.174",
   "description": "Generic minified build of Mozilla's PDF.js library including the viewer component.",
@@ -23,3 +23,6 @@ "repository": {
   },
-  "homepage": "http://mozilla.github.io/pdf.js/"
+  "homepage": "http://mozilla.github.io/pdf.js/",
+  "devDependencies": {
+    "gulp": "^5.0.0"
+  }
 }

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Uses eval

Supply chain risk

Package uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Native code

Supply chain risk

Contains native code (e.g., compiled binaries or shared libraries). Including native code can obscure malicious behavior.

Found 6 instances in 1 package

Improved metrics

Total package byte prevSize

15943462

increased by11.82%

Number of package files

378

increased by2.44%

Lines of code

4866

increased by27.55%

Number of medium supply chain risk alerts

205

decreased by-0.97%

Worsened metrics

Dev dependency count

1

increased byInfinity%

Number of low supply chain risk alerts

8

increased by33.33%

No dependency changes