react-image-lightbox - npm Package Compare versions

Comparing version 3.4.3 to 3.5.0

package.json

 {
   "name": "react-image-lightbox",
-  "version": "3.4.3",
+  "version": "3.5.0",
   "description": "A lightbox component for React.js",
@@ -33,8 +33,8 @@ "scripts": {
   "dependencies": {
+    "prop-types": "^15.5.8",
     "react-modal": "^1.4.0"
   },
   "peerDependencies": {
-    "prop-types": "^15.5.8",
-    "react": "^15.0.0",
-    "react-dom": "^15.0.0"
+    "react": "^15.5.0",
+    "react-dom": "^15.5.0"
   },
@@ -61,2 +61,3 @@ "devDependencies": {
     "html-webpack-plugin": "^2.22.0",
+    "isomorphic-style-loader": "^2.0.0",
     "node-sass": "^3.8.0",
@@ -70,3 +71,2 @@ "postcss-loader": "^1.1.0",
     "sass-loader": "^4.0.0",
-    "style-loader": "^0.13.1",
     "webpack": "^1.13.1",
@@ -73,0 +73,0 @@ "webpack-dev-server": "^1.14.1"

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Uses eval

Supply chain risk

Package uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

472421

increased by26.58%

Lines of code

2299

increased by32.43%

Worsened metrics

Number of medium supply chain risk alerts

1

increased byInfinity%

Dependency changes

• + Addedprop-types@^15.5.8