react-image-lightbox - npm Package Compare versions

Comparing version 4.0.0 to 4.1.0

package.json

 {
   "name": "react-image-lightbox",
-  "version": "4.0.0",
+  "version": "4.1.0",
   "description": "A lightbox component for React.js",
   "scripts": {
-    "build": "npm run lint && npm run build:demo && npm run build:umd",
+    "build": "npm run clean && cross-env NODE_ENV=production webpack --config webpack.config.umd.babel.js --bail",
     "build:demo": "npm run clean:demo && cross-env NODE_ENV=production webpack --config webpack.config.demo.babel.js --bail",
-    "build:umd": "npm run clean:umd && cross-env NODE_ENV=production webpack --config webpack.config.umd.babel.js --bail",
-    "clean": "npm run clean:demo && npm run clean:umd",
+    "clean": "rimraf dist/umd",
     "clean:demo": "rimraf build",
-    "clean:umd": "rimraf dist/umd",
     "start": "cross-env NODE_ENV=development webpack-dev-server --hot --inline --config webpack.config.dev.babel.js",
     "test": "webpack",
     "lint": "eslint src",
-    "deploy": "npm run build && gh-pages -d build",
-    "prepublish": "npm run lint && npm run build:umd"
+    "deploy": "npm run build:demo && gh-pages -d build",
+    "prepublishOnly": "npm run lint && npm run build"
   },
@@ -63,3 +61,2 @@ "main": "dist/umd/react-image-lightbox.js",
     "postcss-loader": "^1.1.0",
-    "prop-types": "^15.5.8",
     "react": "^15.2.0",
@@ -71,3 +68,4 @@ "react-dom": "^15.2.0",
     "webpack": "^1.13.1",
-    "webpack-dev-server": "^1.14.1"
+    "webpack-dev-server": "^1.14.1",
+    "webpack-node-externals": "^1.6.0"
   },
@@ -74,0 +72,0 @@ "keywords": [

README.md

@@ -90,2 +90,3 @@ # React Image Lightbox
 onImageLoadError    | func   | empty function |          | Called when an image fails to load.<div>`(imageSrc: string, srcType: string, errorEvent: object): void`</div>
+onAfterOpen         | func   | empty function |          | Called after the modal has rendered.
 discourageDownloads | bool   | `false`        |          | Enable download discouragement (prevents [right-click -> Save Image As...])
@@ -92,0 +93,0 @@ animationDisabled   | bool   | `false`        |          | Disable all animation

Fixed alerts

Uses eval

Supply chain risk

Package uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Found 1 instance in 1 package

Improved metrics

Number of lines in readme file

137

increased by0.74%

Number of medium supply chain risk alerts

0

decreased by-100%

Worsened metrics

Total package byte prevSize

342799

decreased by-27.06%

Lines of code

1550

decreased by-32.34%

No dependency changes