uglify-js - npm Package Compare versions

Comparing version 1.2.2 to 1.2.3

lib/parse-js.js

@@ -68,2 +68,3 @@ /***********************************************************************
         "continue",
+        "debugger",
         "default",
@@ -97,3 +98,2 @@ "delete",
         "class",
-        "debugger",
         "double",
@@ -100,0 +100,0 @@ "enum",

package.json

@@ -12,3 +12,3 @@ {
 
-        "version" : "1.2.2",
+        "version" : "1.2.3",
 
@@ -15,0 +15,0 @@ "main"    : "./uglify-js.js",

New alerts

Major refactor

Supply chain risk

Package has recently undergone a major refactor. It may be unstable or indicate significant internal changes. Use caution when updating to versions that include significant changes.

Found 1 instance in 1 package

Uses eval

Supply chain risk

Package uses eval() which is a dangerous function. This prevents the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Found 2 instances in 1 package

Dynamic require

Supply chain risk

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

Found 1 instance in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

1326597

increased by404.81%

Number of package files

108

increased by5.88%

Lines of code

28033

increased by567.93%

Worsened metrics

Number of low supply chain risk alerts

10

increased by66.67%

Number of medium supply chain risk alerts

4

increased byInfinity%

No dependency changes