react-simple-phone-input - npm Package Compare versions

Comparing version 4.0.6 to 4.0.7

package.json

 {
   "name": "react-simple-phone-input",
-  "version": "4.0.6",
+  "version": "4.0.7",
   "description": "A simple react phone input component with calling code dropdown🤷",
@@ -48,16 +48,8 @@ "homepage": "https://react-simple-phone-input.vercel.app",
     "@types/react": "^18.0.26",
-    "postcss": "^8.4.20",
     "react": "^18.2.0",
     "react-dom": "^18.2.0",
-    "rollup": "^3.7.5",
     "rollup-plugin-dts": "^5.0.0",
-    "rollup-plugin-peer-deps-external": "^2.2.4",
     "rollup-plugin-postcss": "^4.0.2",
-    "tslib": "^2.4.1",
     "typescript": "^4.9.4"
-  },
-  "peerDependencies": {
-    "react": "^18.2.0",
-    "react-dom": "^18.2.0"
   }
 }

New alerts

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

396565

increased by152.55%

Dependency count

0

decreased by-100%

Dev dependency count

9

decreased by-30.77%

Lines of code

5350

increased by70.93%

Worsened metrics

Number of low supply chain risk alerts

4

increased byInfinity%

No dependency changes