react-router-transition - npm Package Compare versions

Comparing version 1.2.0 to 1.2.1

package.json

 {
   "name": "react-router-transition",
-  "version": "1.2.0",
+  "version": "1.2.1",
   "description": "A thin layer over react-motion for animating routes in react-router.",
@@ -37,8 +37,7 @@ "main": "lib/react-router-transition.js",
   "peerDependencies": {
-    "react": "^15.0.0 || ^16.0.0"
+    "react": "^15.0.0 || ^16.0.0",
+    "react-dom": "^15.0.0 || ^16.0.0"
   },
   "dependencies": {
     "prop-types": "^15.5.10",
-    "react": "^15.6.1",
-    "react-dom": "^15.6.1",
     "react-motion": "^0.5.0",
@@ -82,4 +81,6 @@ "react-router-dom": "^4.1.1"
     "prettier": "^1.3.1",
+    "react": "^15.6.1",
+    "react-dom": "^15.6.1",
     "webpack": "^2.6.1"
   }
 }

New alerts

Uses eval

Supply chain risk

Package uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 2 instances in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

URL strings

Supply chain risk

Package contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.

Found 1 instance in 1 package

Fixed alerts

Uses eval

Supply chain risk

Package uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 2 instances in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

URL strings

Supply chain risk

Package contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.

Found 1 instance in 1 package

Improved metrics

Dependency count

5

-16.67%

Number of low supply chain risk alerts

29

-9.37%

Worsened metrics

Total package byte prevSize

304273

-21.45%

Dev dependency count

37

5.71%

Lines of code

3754

-17.39%

Dependency changes

• + Added

  react@16.14.0
  (transitive)

• + Added

  react-dom@16.14.0
  (transitive)

• + Added

  scheduler@0.19.1
  (transitive)

• - Removed

  react@^15.6.1

• - Removed

  react-dom@^15.6.1

• - Removed

  asap@2.0.6
  (transitive)

• - Removed

  core-js@1.2.7
  (transitive)

• - Removed

  create-react-class@15.7.0
  (transitive)

• - Removed

  encoding@0.1.13
  (transitive)

• - Removed

  fbjs@0.8.18
  (transitive)

• - Removed

  iconv-lite@0.6.3
  (transitive)

• - Removed

  is-stream@1.1.0
  (transitive)

• - Removed

  isomorphic-fetch@2.2.1
  (transitive)

• - Removed

  node-fetch@1.7.3
  (transitive)

• - Removed

  promise@7.3.1
  (transitive)

• - Removed

  react@15.7.0
  (transitive)

• - Removed

  react-dom@15.7.0
  (transitive)

• - Removed

  safer-buffer@2.1.2
  (transitive)

• - Removed

  setimmediate@1.0.5
  (transitive)

• - Removed

  ua-parser-js@0.7.41
  (transitive)

• - Removed

  whatwg-fetch@3.6.20
  (transitive)