victory-brush-line - npm Package Compare versions

Comparing version 35.9.3 to 35.10.0

package.json

 {
   "name": "victory-brush-line",
-  "version": "35.9.3",
+  "version": "35.10.0",
   "description": "Interactive Brush Line Component for Victory",
@@ -25,4 +25,7 @@ "keywords": [
     "react-fast-compare": "^2.0.0",
-    "victory-core": "^35.9.3"
+    "victory-core": "^35.10.0"
   },
+  "peerDependencies": {
+    "react": "^16.6.0 || ^17.0.0"
+  },
   "scripts": {
@@ -29,0 +32,0 @@ "version": "nps build-libs && nps build-dists"

New alerts

Uses eval

Supply chain risk

Package uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Found 1 instance in 1 package

Worsened metrics

Total package byte prevSize

747745

decreased by-40.72%

Dependency count

5

increased by25%

Lines of code

15107

decreased by-34.83%

Number of low supply chain risk alerts

8

increased by100%

Number of medium supply chain risk alerts

4

increased by100%

Dependency changes

• Updatedvictory-core@^35.10.0