react-flatpickr - npm Package Compare versions

Comparing version 3.4.0 to 3.5.0

package.json

 {
   "name": "react-flatpickr",
-  "version": "3.4.0",
+  "version": "3.5.0",
   "description": "flatpickr for React",
@@ -25,4 +25,4 @@ "main": "build/index.js",
   "dependencies": {
-    "flatpickr": "^2.3.5",
-    "prop-types": "^15.5.7"
+    "flatpickr": "^3.0.6",
+    "prop-types": "^15.5.10"
   },
@@ -29,0 +29,0 @@ "devDependencies": {

Readme.md

@@ -13,3 +13,3 @@
 ```jsx
-import 'flatpickr/dist/flatpickr.material_green.min.css'
+import 'flatpickr/dist/themes/material_green.min.css'
 
@@ -36,2 +36,5 @@ import Flatpickr from 'react-flatpickr'
 
+### Themes
+Please import themes directly from the `flatpickr` dependency. In most cases, you should just be able to `import 'flatpickr/dist/themes/theme.css'`, but in some cases npm or yarn may install `flatpickr` in `node_modules/react-flatpickr/node_modules/flatpickr`. If that happens, removing your `node_modules` dir and reinstalling should put flatpickr in the root `node_modules` dir, or you can import from `react-flatpickr/node_modules/flatpickr` manually.
+
 ### License
@@ -38,0 +41,0 @@ MIT

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Uses eval

Supply chain risk

Package uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Found 2 instances in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

2009447

increased by5.96%

Lines of code

23005

increased by4.78%

Number of lines in readme file

52

increased by6.12%

Number of medium supply chain risk alerts

0

decreased by-100%

Worsened metrics

Number of low supply chain risk alerts

416

increased by2.46%

Dependency changes

• + Addedflatpickr@3.1.5(transitive)

• - Removedflatpickr@2.6.3(transitive)

• Updatedflatpickr@^3.0.6

• Updatedprop-types@^15.5.10