zrender - npm Package Compare versions

Comparing version 5.4.3 to 5.4.4

lib/core/Transformable.js

@@ -48,3 +48,6 @@ import * as matrix from './matrix.js';
         if (!(needLocalTransform || parentTransform)) {
-            m && mIdentity(m);
+            if (m) {
+                mIdentity(m);
+                this.invTransform = null;
+            }
             return;
@@ -51,0 +54,0 @@ }

lib/zrender.d.ts

@@ -87,5 +87,5 @@ /*!
 export declare function registerPainter(name: string, Ctor: PainterBaseCtor): void;
-export declare const version = "5.4.3";
+export declare const version = "5.4.4";
 export interface ZRenderType extends ZRender {
 }
 export {};

lib/zrender.js

@@ -264,3 +264,3 @@ /*!
 }
-export var version = '5.4.3';
+export var version = '5.4.4';
 ;

package.json

 {
   "name": "zrender",
-  "version": "5.4.3",
+  "version": "5.4.4",
   "description": "A lightweight graphic library providing 2d draw for Apache ECharts",
@@ -17,5 +17,6 @@ "keywords": [
   "scripts": {
-    "prepublish": "npm run release",
+    "prepare": "npm run build:lib",
     "build": "npm run build:bundle && npm run build:lib",
     "release": "node build/build.js --minify && npm run build:lib",
+    "prepublishOnly": "node build/prepublish.js",
     "prepare:nightly": "node build/prepareNightly.js",
@@ -22,0 +23,0 @@ "prepare:nightly-next": "node build/prepareNightly.js --next",

src/core/Transformable.ts

@@ -111,3 +111,7 @@ import * as matrix from './matrix';
         if (!(needLocalTransform || parentTransform)) {
-            m && mIdentity(m);
+            if (m) {
+                mIdentity(m);
+                // reset invTransform
+                this.invTransform = null;
+            }
             return;
@@ -114,0 +118,0 @@ }

src/zrender.ts

@@ -488,5 +488,5 @@ /*!
  */
-export const version = '5.4.3';
+export const version = '5.4.4';
 
 
 export interface ZRenderType extends ZRender {};

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Dynamic require

Supply chain risk

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

Found 1 instance in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

4104033

increased by1.45%

Number of package files

371

increased by0.27%

Lines of code

64942

increased by0.13%

Worsened metrics

Number of low supply chain risk alerts

24

increased by9.09%

No dependency changes