react-simple-date-picker - npm Package Compare versions

Comparing version 0.1.3 to 0.1.4

package.json

 {
   "name": "react-simple-date-picker",
-  "version": "0.1.3",
+  "version": "0.1.4",
   "repository": {
@@ -5,0 +5,0 @@ "type": "git",

src/components/DatePicker.js

 import React, { Component } from 'react';
 import PropTypes from 'prop-types';
-import '../lib/mdi/css/mdi.min.css';
-import '../css/DatePicker.min.css';
+import '../lib/mdi/css/materialdesignicons.css';
+import '../css/DatePicker.css';
 import { DatePickerDate, DatePickerMonth } from '../middleware';
@@ -6,0 +6,0 @@ import dayOnClick from './middleware/dayOnClick';

webpack.config.dev.js

@@ -38,3 +38,3 @@ const path = require('path');
         test: /\.(eot|svg|ttf|woff|woff2)$/,
-        loader: 'file-loader?name=public/fonts/[name].[ext]',
+        loader: 'file-loader?name=fonts/[name].[ext]',
         exclude: /node_modules/
@@ -41,0 +41,0 @@ }

webpack.config.prod.js

@@ -32,3 +32,3 @@ const path = require('path');
         test: /\.(eot|svg|ttf|woff|woff2)$/,
-        loader: 'file-loader?name=public/fonts/[name].[ext]',
+        loader: 'file-loader?name=fonts/[name].[ext]',
         exclude: /node_modules/
@@ -35,0 +35,0 @@ }

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Native code

Supply chain risk

Contains native code (e.g., compiled binaries or shared libraries). Including native code can obscure malicious behavior.

Found 6 instances in 1 package

Major refactor

Supply chain risk

Package has recently undergone a major refactor. It may be unstable or indicate significant internal changes. Use caution when updating to versions that include significant changes.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 2 instances in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

9048300

increased by203.98%

Number of package files

46

increased by31.43%

Lines of code

12440

increased by1031.94%

Worsened metrics

Number of low supply chain risk alerts

87

increased byInfinity%

Number of medium supply chain risk alerts

10

increased by233.33%

No dependency changes