react-draft-wysiwyg - npm Package Compare versions

Comparing version 1.9.4 to 1.9.5

package.json

 {
   "name": "react-draft-wysiwyg",
-  "version": "1.9.4",
+  "version": "1.9.5",
   "description": "A wysiwyg on top of DraftJS.",
@@ -57,4 +57,5 @@ "main": "dist/react-draft-wysiwyg.js",
     "classnames": "^2.2.5",
+    "draftjs-utils": "^0.7.4",
     "immutable": "^4.0.0-rc.1",
-    "draftjs-utils": "^0.7.3"
+    "prop-types": "^15.5.8"
   },
@@ -61,0 +62,0 @@ "peerDependencies": {

New alerts

Uses eval

Supply chain risk

Package uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Found 1 instance in 1 package

Fixed alerts

Uses eval

Supply chain risk

Package uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

641595

increased by0.34%

Worsened metrics

Dependency count

7

increased by16.67%

Dependency changes

• + Addedprop-types@^15.5.8

• Updateddraftjs-utils@^0.7.4