three-render-objects - npm Package Compare versions

Comparing version 1.28.1 to 1.28.2

package.json

 {
   "name": "three-render-objects",
-  "version": "1.28.1",
+  "version": "1.28.2",
   "description": "Easy way to render ThreeJS objects with built-in interaction defaults",
@@ -47,3 +47,3 @@ "license": "MIT",
   "dependencies": {
-    "@tweenjs/tween.js": "18",
+    "@tweenjs/tween.js": "18 - 19",
     "accessor-fn": "1",
@@ -57,15 +57,15 @@ "kapsule": "^1.14",
   "devDependencies": {
-    "@babel/core": "^7.20.12",
-    "@babel/preset-env": "^7.20.2",
+    "@babel/core": "^7.21.4",
+    "@babel/preset-env": "^7.21.4",
     "@rollup/plugin-babel": "^6.0.3",
-    "@rollup/plugin-commonjs": "^24.0.1",
-    "@rollup/plugin-node-resolve": "^15.0.1",
-    "@rollup/plugin-terser": "^0.4.0",
+    "@rollup/plugin-commonjs": "^24.1.0",
+    "@rollup/plugin-node-resolve": "^15.0.2",
+    "@rollup/plugin-terser": "^0.4.1",
     "postcss": "^8.4.21",
-    "rimraf": "^4.1.2",
-    "rollup": "^3.14.0",
-    "rollup-plugin-dts": "^5.1.1",
+    "rimraf": "^5.0.0",
+    "rollup": "^3.20.2",
+    "rollup-plugin-dts": "^5.3.0",
     "rollup-plugin-postcss": "^4.0.2",
-    "three": "^0.149.0",
-    "typescript": "^4.9.5"
+    "three": "^0.151.3",
+    "typescript": "^5.0.4"
   },
@@ -72,0 +72,0 @@ "engines": {

New alerts

Uses eval

Supply chain risk

Package uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

754584

increased by6.45%

Lines of code

5437

increased by9.05%

Worsened metrics

Number of medium supply chain risk alerts

2

increased byInfinity%

Dependency changes

• + Added@tweenjs/tween.js@19.0.0(transitive)

• - Removed@tweenjs/tween.js@18.6.4(transitive)

• Updated@tweenjs/tween.js@18 - 19