unreach-util - npm Package Compare versions

Comparing version 0.10.1 to 0.11.0

env.js

@@ -1,2 +0,24 @@
-const env = process.env.REACT_APP_ENV || process.env.NODE_ENV || 'development';
+import qs from 'query-string';
+import storage from './storage';
+
+
+// try get from url for debug
+const query = qs.parse(window.location.search);
+const qsenv = query['debug.env'];
+if (qsenv !== undefined) {
+  if (qsenv) {
+    storage.set('debug.env', qsenv);
+  } else {
+    storage.remove('debug.env');
+  }
+}
+
+
+const env = storage.get('debug.env') ||
+      process.env.REACT_APP_ENV ||
+      process.env.NODE_ENV || 'development';
+
+
+console.log(`LOG: env is ${env}`);   // eslint-disable-line
+
 export default env;

package.json

 {
   "name": "unreach-util",
-  "version": "0.10.1",
+  "version": "0.11.0",
   "description": "前端工具基础库",
@@ -5,0 +5,0 @@ "main": "index.js",

New alerts

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 2 instances in 1 package

Improved metrics

Total package byte prevSize

14183

increased by2.99%

Lines of code

453

increased by3.42%

Worsened metrics

Number of low supply chain risk alerts

2

increased byInfinity%

No dependency changes