primus - npm Package Compare versions

Comparing version 7.3.5 to 8.0.0

package.json

 {
   "name": "primus",
-  "version": "7.3.5",
+  "version": "8.0.0",
   "description": "Primus is a simple abstraction around real-time frameworks. It allows you to easily switch between different frameworks without any code changes.",
@@ -67,3 +67,3 @@ "main": "index.js",
     "browserchannel": "~2.1.0",
-    "browserify": "~16.5.0",
+    "browserify": "~17.0.0",
     "chai": "~4.2.0",
@@ -76,11 +76,11 @@ "condenseify": "~1.1.1",
     "emits": "~3.0.0",
-    "engine.io": "~3.4.0",
-    "engine.io-client": "~3.4.0",
+    "engine.io": "~4.0.1",
+    "engine.io-client": "~4.0.1",
     "faye-websocket": "~0.11.0",
     "inherits": "~2.0.3",
-    "mocha": "~8.0.1",
+    "mocha": "~8.2.0",
     "pre-commit": "~1.2.0",
     "primus-msgpack": "~1.0.2",
     "pumpify": "~2.0.0",
-    "querystringify": "~2.1.0",
+    "querystringify": "~2.2.0",
     "recovery": "~0.2.6",
@@ -91,3 +91,3 @@ "request": "~2.88.0",
     "sockjs": "~0.3.18",
-    "sockjs-client": "~1.4.0",
+    "sockjs-client": "~1.5.0",
     "through2": "~4.0.2",
@@ -94,0 +94,0 @@ "tick-tock": "~1.0.0",

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Uses eval

Supply chain risk

Package uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Uses eval

Supply chain risk

Package uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Found 1 instance in 1 package

Worsened metrics

Total package byte prevSize

535489

decreased by-4.41%

Lines of code

13690

decreased by-5.25%

No dependency changes