rox-react-native - npm Package Compare versions

Comparing version 2.1.1 to 2.1.2

package.json

 {
   "name": "rox-react-native",
-  "version": "2.1.1",
+  "version": "2.1.2",
   "description": "Rollout.io ROX JS SDK Client",
@@ -39,3 +39,3 @@ "author": "Rollout.io <[e-mail]>",
   "ROX": {
-    "api_version": "1.4.0"
+    "api_version": "1.5.0"
   },
@@ -46,5 +46,6 @@ "main": "dist/rox-react-native.js",
   "dependencies": {
-    "rox-base": "^2.1.1"
+    "rox-base": "^2.1.2"
   },
   "devDependencies": {
+    "babel-eslint": "^8.2.2",
     "babel-loader": "^7.1.1",
@@ -54,2 +55,3 @@ "babel-plugin-transform-class-properties": "^6.24.1",
     "babel-preset-react": "^6.24.1",
+    "browserify-sign": "^4.0.4",
     "css-loader": "^0.28.4",
@@ -66,3 +68,3 @@ "enquirer": "^1.0.2",
     "style-loader": "^0.18.2",
-    "uglifyjs-webpack-plugin": "1.0.0-beta.2",
+    "uglifyjs-webpack-plugin": "^1.2.3",
     "webpack": "^3.5.5",
@@ -73,6 +75,12 @@ "webpack-bundle-analyzer": "^2.8.3",
   "jest": {
-    "moduleFileExtensions": ["js"],
-    "moduleDirectories": ["node_modules"],
-    "transformIgnorePatterns": ["/node_modules/(?!rox-base).+\\.js$"]
+    "moduleFileExtensions": [
+      "js"
+    ],
+    "moduleDirectories": [
+      "node_modules"
+    ],
+    "transformIgnorePatterns": [
+      "/node_modules/(?!rox-base).+\\.js$"
+    ]
   }
 }

src/lib/RoxClient.js

@@ -6,2 +6,3 @@ import RoxBase from 'rox-base';
 import RoxCache from './RoxCache';
+import RoxCrypto from './RoxCrypto';
 
@@ -14,3 +15,4 @@ const { createRoxClient } = RoxBase;
   DefaultSetupOptions,
-  cacheService: RoxCache
+  RoxCache,
+  RoxCrypto
 });

New alerts

Uses eval

Supply chain risk

Package uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

2061728

increased by177.4%

Number of package files

23

increased by15%

Lines of code

27233

increased by192.64%

Worsened metrics

Dev dependency count

21

increased by10.53%

Number of medium supply chain risk alerts

6

increased by50%

Dependency changes

• Updatedrox-base@^2.1.2