react-dnd - npm Package Compare versions

Comparing version 2.4.0 to 2.5.1

lib/DragDropContext.js

@@ -109,3 +109,3 @@ 'use strict';
             ref: function ref(child) {
-              return _this2.child = child;
+              _this2.child = child;
             }
@@ -112,0 +112,0 @@ }));

lib/DragDropContextProvider.js

@@ -78,3 +78,4 @@ 'use strict';
   children: _propTypes2.default.element.isRequired,
-  window: _propTypes2.default.object }, _class.defaultProps = {
+  window: _propTypes2.default.object // eslint-disable-line react/forbid-prop-types
+}, _class.defaultProps = {
   window: undefined
@@ -81,0 +82,0 @@ }, _class.childContextTypes = _DragDropContext.CHILD_CONTEXT_TYPES, _class.displayName = 'DragDropContextProvider', _class.contextTypes = {

lib/DragLayer.js

@@ -144,3 +144,3 @@ 'use strict';
             ref: function ref(child) {
-              return _this2.child = child;
+              _this2.child = child;
             }
@@ -147,0 +147,0 @@ }));

package.json

 {
   "name": "react-dnd",
-  "version": "2.4.0",
+  "version": "2.5.1",
   "description": "Drag and Drop for React",
   "main": "lib/index.js",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/react-dnd/react-dnd.git"
+  },
   "license": "MIT",
@@ -18,12 +22,11 @@ "scripts": {
     "disposables": "^1.0.1",
-    "dnd-core": "^2.4.0",
-    "hoist-non-react-statics": "^1.2.0",
+    "dnd-core": "^2.5.1",
+    "hoist-non-react-statics": "^2.1.0",
     "invariant": "^2.1.0",
     "lodash": "^4.2.0",
-    "prop-types": "^15.5.8"
+    "prop-types": "^15.5.10"
   },
   "peerDependencies": {
     "react": "^0.14.0 || ^15.0.0-0"
-  },
-  "devDependencies": {}
+  }
 }

New alerts

Uses eval

Supply chain risk

Package uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Found 1 instance in 1 package

Fixed alerts

No repository

Supply chain risk

Package does not have a linked source code repository. Without this field, a package will have no reference to the location of the source code use to generate the package.

Found 1 instance in 1 package

Improved metrics

Number of package files

29

increased by3.57%

Number of low supply chain risk alerts

3

decreased by-57.14%

Worsened metrics

Total package byte prevSize

355080

decreased by-7.65%

Lines of code

7261

decreased by-10.14%

Number of medium supply chain risk alerts

7

increased by40%

Dependency changes

• + Addedhoist-non-react-statics@2.5.5(transitive)

• - Removedhoist-non-react-statics@1.2.0(transitive)

• Updateddnd-core@^2.5.1

• Updatedhoist-non-react-statics@^2.1.0

• Updatedprop-types@^15.5.10