tactual - npm Package Compare versions
New alerts
Major refactor
Supply chain riskPackage has recently undergone a major refactor. It may be unstable or indicate significant internal changes. Use caution when updating to versions that include significant changes.
Uses eval
Supply chain riskPackage uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.
Long strings
Supply chain riskContains long string literals, which may be a sign of obfuscated or packed code.
Fixed alerts
AI-detected potential code anomaly
Supply chain riskAI has identified unusual behaviors that may pose a security risk.
Improved metrics
- Total package byte prevSize
1613708
63.11%- Number of package files
104
48.57%- Lines of code
14363
57.47%- Number of lines in readme file
812
48.45%Worsened metrics
- Dependency count
6
50%- Dev dependency count
13
8.33%- Number of medium supply chain risk alerts
4
300%Dependency changes
+ Added
@asamuzakjp/css-color@5.1.11(transitive)+ Added
@asamuzakjp/dom-selector@7.1.1(transitive)+ Added
@asamuzakjp/generational-cache@1.0.1(transitive)+ Added
@asamuzakjp/nwsapi@2.3.9(transitive)+ Added
@babel/code-frame@7.29.7(transitive)+ Added
@babel/helper-validator-identifier@7.29.7(transitive)+ Added
@babel/runtime@7.29.7(transitive)+ Added
@bramus/specificity@2.4.2(transitive)+ Added
@csstools/color-helpers@6.1.1(transitive)+ Added
@csstools/css-calc@3.4.0(transitive)+ Added
@csstools/css-color-parser@4.2.3(transitive)+ Added
@csstools/css-parser-algorithms@4.0.0(transitive)+ Added
@csstools/css-syntax-patches-for-csstree@1.1.14(transitive)+ Added
@csstools/css-tokenizer@4.0.1(transitive)+ Added
@exodus/bytes@1.15.1(transitive)+ Added
@guidepup/virtual-screen-reader@0.32.1(transitive)+ Added
@testing-library/dom@10.4.2(transitive)+ Added
@testing-library/user-event@14.6.7(transitive)+ Added
@types/aria-query@5.0.4(transitive)+ Added
ansi-regex@5.0.1(transitive)+ Added
ansi-styles@5.2.0(transitive)+ Added
aria-query@5.3.0(transitive)+ Added
bidi-js@1.1.0(transitive)+ Added
css-tree@3.2.1(transitive)+ Added
data-urls@7.0.0(transitive)+ Added
decimal.js@10.6.0(transitive)+ Added
dequal@2.0.3(transitive)+ Added
dom-accessibility-api@0.5.160.7.1(transitive)+ Added
entities@8.1.0(transitive)+ Added
html-aria@0.5.3(transitive)+ Added
html-encoding-sniffer@6.0.0(transitive)+ Added
is-potential-custom-element-name@1.0.1(transitive)+ Added
js-tokens@4.0.0(transitive)+ Added
jsdom@29.1.1(transitive)+ Added
lru-cache@11.5.3(transitive)+ Added
lz-string@1.5.0(transitive)+ Added
mdn-data@2.27.1(transitive)+ Added
parse5@8.0.1(transitive)+ Added
picocolors@1.1.1(transitive)+ Added
pretty-format@27.5.1(transitive)+ Added
punycode@2.3.1(transitive)+ Added
react-is@17.0.2(transitive)+ Added
saxes@6.0.0(transitive)+ Added
source-map-js@1.2.1(transitive)+ Added
symbol-tree@3.2.4(transitive)+ Added
tldts@7.4.13(transitive)+ Added
tldts-core@7.4.13(transitive)+ Added
tough-cookie@6.0.2(transitive)+ Added
tr46@6.0.0(transitive)+ Added
undici@7.29.1(transitive)+ Added
w3c-xmlserializer@5.0.0(transitive)+ Added
webidl-conversions@8.0.1(transitive)+ Added
whatwg-mimetype@5.0.0(transitive)+ Added
whatwg-url@16.0.1(transitive)+ Added
xml-name-validator@5.0.0(transitive)+ Added
xmlchars@2.2.0(transitive)