react-multi-carousel - npm Package Compare versions

Comparing version 2.6.4 to 2.6.5

.github/ISSUE_TEMPLATE/bug_report.md

@@ -11,3 +11,3 @@ ---
 
-Before you submit a feature request or report a bug to be fixed, make sure you have stared this repository or given or about to give good compliments regarding what a good job the contributors of this project have done as they are doing this for free at their own free time, this is the least you can do. A [donation](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=GJSPRG9RKSJLQ&source=url) is also welcomed
+Before you submit a feature request or report a bug to be fixed, make sure you have stared this repository. A [donation](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=GJSPRG9RKSJLQ&source=url) is also welcomed
 
@@ -30,13 +30,2 @@ **Describe the bug**
 
-**Desktop (please complete the following information):**
- - OS: [e.g. iOS]
- - Browser [e.g. chrome, safari]
- - Version [e.g. 22]
-
-**Smartphone (please complete the following information):**
- - Device: [e.g. iPhone6]
- - OS: [e.g. iOS8.1]
- - Browser [e.g. stock browser, safari]
- - Version [e.g. 22]
-
 **Additional context**
@@ -43,0 +32,0 @@ Add any other context about the problem here.

package.json

 {
   "name": "react-multi-carousel",
   "private": false,
-  "version": "2.6.4",
+  "version": "2.6.5",
   "description": "Production-ready, lightweight fully customizable React carousel component that rocks supports multiple items and SSR(Server-side rendering) with typescript.",
@@ -6,0 +6,0 @@ "main": "index.js",

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Native code

Supply chain risk

Contains native code (e.g., compiled binaries or shared libraries). Including native code can obscure malicious behavior.

Found 3 instances in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 1 instance in 1 package

Minified code

Quality

This package contains minified code. This may be harmless in some cases where minified code is included in packaged libraries, however packages on npm should not minify code.

Found 2 instances in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Native code

Supply chain risk

Contains native code (e.g., compiled binaries or shared libraries). Including native code can obscure malicious behavior.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

749492

increased by19.68%

Number of package files

86

increased by138.89%

Lines of code

14330

increased by2.12%

Worsened metrics

Number of low quality alerts

10

increased byInfinity%

Number of low supply chain risk alerts

2

increased by100%

Number of medium supply chain risk alerts

3

increased by200%

No dependency changes