react-querybuilder - npm Package Compare versions

Comparing version 1.0.0 to 1.0.1

package.json

 {
     "name": "react-querybuilder",
-    "version": "1.0.0",
+    "version": "1.0.1",
     "description": "The React <QueryBuilder /> component for constructing queries",
-    "main": "lib/index.js",
+    "main": "dist/index.js",
     "repository": {
@@ -7,0 +7,0 @@ "type": "git",

webpack-dist.config.js

@@ -9,3 +9,3 @@ 'use strict';
     entry: {
-        'react-query-builder': './lib/index.js'
+        'index': './lib/index.js'
     },
@@ -12,0 +12,0 @@ output: {

New alerts

Uses eval

Supply chain risk

Package uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Found 2 instances in 1 package

Improved metrics

Total package byte prevSize

84053

increased by369.75%

Number of package files

16

increased by23.08%

Lines of code

1265

increased by174.4%

Worsened metrics

Number of medium supply chain risk alerts

3

increased byInfinity%

No dependency changes