react-dnd - npm Package Compare versions

Comparing version 14.0.3 to 14.0.4

package.json

 {
   "name": "react-dnd",
-  "version": "14.0.3",
+  "version": "14.0.4",
   "description": "Drag and Drop for React",
@@ -26,3 +26,3 @@ "main": "dist/cjs/index.js",
     "@react-dnd/shallowequal": "^2.0.0",
-    "dnd-core": "14.0.0",
+    "dnd-core": "14.0.1",
     "fast-deep-equal": "^3.1.3",
@@ -33,6 +33,6 @@ "hoist-non-react-statics": "^3.3.2"
     "@react-dnd/build": "12.0.0",
-    "@testing-library/react": "^12.0.0",
+    "@testing-library/react": "^12.1.0",
     "@types/hoist-non-react-statics": "^3.3.1",
-    "@types/node": "^14.17.9",
-    "@types/react": "^17.0.17",
+    "@types/node": "^14.17.19",
+    "@types/react": "^17.0.24",
     "@types/react-dom": "^17.0.9",
@@ -43,3 +43,3 @@ "gulp": "^4.0.2",
     "react-dnd-test-utils": "portal:../test-utils",
-    "react-dom": "^17.0.1"
+    "react-dom": "^17.0.2"
   },
@@ -46,0 +46,0 @@ "peerDependencies": {

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Uses eval

Supply chain risk

Package uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

696299

increased by0.06%

Lines of code

13719

increased by0.14%

Number of medium supply chain risk alerts

0

decreased by-100%

Dependency changes

• + Addeddnd-core@14.0.1(transitive)

• - Removeddnd-core@14.0.0(transitive)

• Updateddnd-core@14.0.1