react-component-playground - npm Package Compare versions

Comparing version 1.0.1 to 1.1.0

package.json

 {
   "name": "react-component-playground",
-  "version": "1.0.1",
+  "version": "1.1.0",
   "description": "Isolated loader for React components",
@@ -17,6 +17,6 @@ "repository": "https://github.com/react-cosmos/react-cosmos/tree/master/packages/react-component-playground",
     "lodash": "^3.6.0",
-    "react-codemirror": "git://github.com/skidding/react-codemirror.git",
+    "@skidding/react-codemirror": "^0.3.0",
     "react-component-tree": "^1.0.1",
     "react-dom-polyfill": "^1.0.1",
-    "react-querystring-router": "^1.0.1",
+    "react-querystring-router": "^1.1.0",
     "ubervu-react-split-pane": "^0.1.14"
@@ -23,0 +23,0 @@ },

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Git dependency

Supply chain risk

Contains a dependency which resolves to a remote git URL. Dependencies fetched from git URLs are not immutable can be used to inject untrusted code or reduce the likelihood of a reproducible install.

Found 1 instance in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

Improved metrics

Lines of code

797

increased by0.13%

Number of high supply chain risk alerts

0

decreased by-100%

Worsened metrics

Total package byte prevSize

67980

decreased by-0.31%

Dependency changes

• + Added@skidding/react-codemirror@^0.3.0

• + Added@skidding/react-codemirror@0.3.0(transitive)

• + Addedlodash.debounce@4.0.8(transitive)

• - Removedreact-codemirror@git://github.com/skidding/react-codemirror.git

• Updatedreact-querystring-router@^1.1.0