react-json-view - npm Package Compare versions

Comparing version 1.1.6 to 1.1.7

package.json

 {
   "name": "react-json-view",
   "description": "interactive json viewer wrapped up in a react component",
-  "version": "1.1.6",
+  "version": "1.1.7",
   "main": "dist/main.js",
@@ -6,0 +6,0 @@ "devDependencies": {

webpack.config.js

@@ -9,11 +9,28 @@ const path = require('path');
     style: path.join(__dirname, 'src/style'),
-    build_index: path.join(__dirname, 'dist'),
-    build_assets: path.join(__dirname, 'dist')
+    build: path.join(__dirname, 'dist'),
+    example: path.join(__dirname, 'example')
 };
 
+const entrypoint = process.env.NODE_ENV === 'local_example'
+  ? PATHS.example + '/example.js' : PATHS.js + '/index.js';
+
 const config = {
-  entry: [
-    PATHS.js + '/index.js',
-  ],
-  externals: {},
+  entry: [entrypoint],
+  externals: {
+      react: {
+        root: 'React',
+        commonjs2: 'react',
+        commonjs: 'react',
+        amd: 'react'
+      }
+    },
+    {
+      'react-dom': {
+        root: 'ReactDOM',
+        commonjs2: 'react-dom',
+        commonjs: 'react-dom',
+        amd: 'react-dom'
+      }
+    },
+  },
   devServer: {
@@ -25,9 +42,9 @@ host: '0.0.0.0',
     historyApiFallback: true,
-    contentBase: PATHS.build_index
+    contentBase: PATHS.build
   },
   output: {
-    path: PATHS.build_index,
+    path: PATHS.build,
     filename: 'main.js',
     library: 'reactJsonView',
-    libraryTarget: 'var'
+    libraryTarget: 'umd'
   },
@@ -65,3 +82,3 @@ plugins: [
         ],
-        include: PATHS.js
+        include: [PATHS.js, PATHS.example]
       },
@@ -68,0 +85,0 @@ {

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Major refactor

Supply chain risk

Package has recently undergone a major refactor. It may be unstable or indicate significant internal changes. Use caution when updating to versions that include significant changes.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Native code

Supply chain risk

Contains native code (e.g., compiled binaries or shared libraries). Including native code can obscure malicious behavior.

Found 4 instances in 1 package

Improved metrics

Number of medium supply chain risk alerts

1

decreased by-75%

Worsened metrics

Total package byte prevSize

132002

decreased by-96.33%

Number of package files

18

decreased by-28%

Lines of code

333

decreased by-91.33%

Number of low supply chain risk alerts

1

increased byInfinity%

No dependency changes