react-select-plus - npm Package Compare versions

Comparing version 1.0.0-rc.3.patch4 to 1.0.0-rc.3.patch5

package.json

 {
   "name": "react-select-plus",
-  "version": "1.0.0-rc.3.patch4",
+  "version": "1.0.0-rc.3.patch5",
   "description": "A fork of react-select with support for option groups",
@@ -15,3 +15,3 @@ "main": "lib/Select.js",
     "classnames": "^2.2.4",
-    "react-input-autosize": "^1.1.0"
+    "react-input-autosize": "1.1.0"
   },
@@ -18,0 +18,0 @@ "devDependencies": {

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Major refactor

Supply chain risk

Package has recently undergone a major refactor. It may be unstable or indicate significant internal changes. Use caution when updating to versions that include significant changes.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Major refactor

Supply chain risk

Package has recently undergone a major refactor. It may be unstable or indicate significant internal changes. Use caution when updating to versions that include significant changes.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

2115277

increased by231.58%

Number of package files

99

increased by10%

Lines of code

46549

increased by257.03%

Worsened metrics

Number of low supply chain risk alerts

17

increased by325%

Dependency changes

• + Addedreact-input-autosize@1.1.0(transitive)

• - Removedreact-input-autosize@1.2.0(transitive)

• Updatedreact-input-autosize@1.1.0