[Snyk] Upgrade drag-drop from 2.1.0 to 2.14.0

[trabab]

Snyk has created this PR to upgrade drag-drop from 2.1.0 to 2.14.0.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 26 versions ahead of your current version.

• The recommended version was released 8 years ago.

Breaking Change Risk

Notice: This assessment is enhanced by AI.

Release notes

Package name: drag-drop

• 2.14.0 - 2018-04-13
  

  2.14.0

• 2.13.3 - 2018-04-04
  

  2.13.3

• 2.13.2 - 2017-02-08
  

  2.13.2

• 2.13.1 - 2017-01-20
  

  2.13.1

• 2.13.0 - 2016-12-31
  

  2.13.0

• 2.12.1 - 2016-08-04
  

  2.12.1

• 2.12.0 - 2016-08-04
  

  2.12.0

• 2.11.0 - 2016-03-09
  

  2.11.0

• 2.10.0 - 2016-02-17
  

  2.10.0

• 2.9.0 - 2016-02-17
  

  2.9.0

• 2.8.0 - 2016-02-09
• 2.7.0 - 2016-02-06
• 2.6.0 - 2016-01-21
• 2.5.0 - 2016-01-21
• 2.4.3 - 2016-01-11
• 2.4.2 - 2016-01-11
• 2.4.1 - 2016-01-09
• 2.4.0 - 2016-01-02
• 2.3.2 - 2016-01-02
• 2.3.1 - 2015-10-25
• 2.3.0 - 2015-08-08
• 2.2.4 - 2015-07-14
• 2.2.3 - 2015-06-16
• 2.2.2 - 2015-06-01
• 2.2.1 - 2015-05-28
• 2.2.0 - 2015-05-28
• 2.1.0 - 2015-04-23

from drag-drop GitHub release notes

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• This PR was automatically created by Snyk using the credentials of a real user.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

• 🧐 View latest project report
• 📜 Customise PR templates
• 🛠 Adjust upgrade PR settings
• 🔕 Ignore this dependency or unsubscribe from future upgrade PRs

[trabab]

A specific changelog for the drag-drop package from version 2.1.0 to 2.14.0 could not be located. The most prominent npm package with this name, maintained by Feross, uses a different versioning scheme (currently at v7.2.0) and appears to be inactive, with the last publish being several years ago.

Due to the inability to verify the source and find release notes for this specific version range, the risk is assessed as medium. It is recommended to manually verify the functionality of the drag-and-drop features in your application after this upgrade.

Recommendation: Before merging, confirm the origin of this package and search for any associated release notes or changelogs. Thoroughly test all drag-and-drop functionality in a staging environment to ensure no breaking changes were introduced.

Notice 🤖: This content was augmented using artificial intelligence. AI-generated content may contain errors and should be reviewed for accuracy before use.