socketcluster-client - npm Package Compare versions

Comparing version 15.0.2 to 15.0.3

lib/clientsocket.js

@@ -9,3 +9,3 @@ const StreamDemux = require('stream-demux');
 const LinkedList = require('linked-list');
-const cloneDeep = require('lodash.clonedeep');
+const cloneDeep = require('clone-deep');
 const Buffer = require('buffer/').Buffer;
@@ -12,0 +12,0 @@ const wait = require('./wait');

package.json

 {
   "name": "socketcluster-client",
   "description": "SocketCluster JavaScript client",
-  "version": "15.0.2",
+  "version": "15.0.3",
   "homepage": "https://socketcluster.io/",
@@ -6,0 +6,0 @@ "contributors": [

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Uses eval

Supply chain risk

Package uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Found 1 instance in 1 package

Improved metrics

Number of medium supply chain risk alerts

0

decreased by-100%

Worsened metrics

Total package byte prevSize

396879

decreased by-9.49%

Lines of code

8596

decreased by-13.43%

No dependency changes