react-devtools-core - npm Package Compare versions

Comparing version 2.0.12 to 2.1.0

package.json

 {
   "name": "react-devtools-core",
-  "version": "2.0.12",
+  "version": "2.1.0",
   "description": "Use react-devtools outside of the browser",
@@ -27,5 +27,8 @@ "main": "./build/backend.js",
   "dependencies": {
-    "cross-env": "^3.1.4",
+    "shell-quote": "^1.6.1",
     "ws": "^2.0.3"
+  },
+  "devDependencies": {
+    "cross-env": "^3.1.4"
   }
 }

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Shell access

Supply chain risk

This module accesses the system shell. Accessing the system shell increases the risk of executing arbitrary code.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 3 instances in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

4163107

increased by5.41%

Lines of code

19057

increased by6.07%

Worsened metrics

Dev dependency count

1

increased byInfinity%

Number of low supply chain risk alerts

9

increased by200%

Number of medium supply chain risk alerts

2

increased by100%

Dependency changes

• + Addedshell-quote@^1.6.1

• + Addedshell-quote@1.8.2(transitive)

• - Removedcross-env@^3.1.4

• - Removedcross-env@3.2.4(transitive)

• - Removedcross-spawn@5.1.0(transitive)

• - Removedis-windows@1.0.2(transitive)

• - Removedisexe@2.0.0(transitive)

• - Removedlru-cache@4.1.5(transitive)

• - Removedpseudomap@1.0.2(transitive)

• - Removedshebang-command@1.2.0(transitive)

• - Removedshebang-regex@1.0.0(transitive)

• - Removedwhich@1.3.1(transitive)

• - Removedyallist@2.1.2(transitive)