@aws-cdk/integ-runner - npm Package Compare versions

Comparing version 2.197.21 to 2.197.22

package.json

@@ -36,3 +36,3 @@ {
     "@aws-cdk/integ-tests-alpha": "2.184.1-alpha.0",
-    "@cdklabs/eslint-plugin": "^2.0.4",
+    "@cdklabs/eslint-plugin": "^2.0.5",
     "@stylistic/eslint-plugin": "^3",
@@ -47,3 +47,3 @@ "@types/fs-extra": "^11",
     "@typescript-eslint/parser": "^8",
-    "aws-cdk-lib": "2.253.1",
+    "aws-cdk-lib": "2.254.0",
     "commit-and-tag-version": "^12",
@@ -62,4 +62,4 @@ "constructs": "^10",
     "mock-fs": "^5",
-    "node-backpack": "^1.1.32",
-    "nx": "^22.7.1",
+    "node-backpack": "^1.1.33",
+    "nx": "^22.7.2",
     "prettier": "^2.8",
@@ -70,9 +70,9 @@ "projen": "^0.99.61",
     "@aws-cdk/aws-service-spec": "^0.1.180",
-    "@aws-cdk/cdk-assets-lib": "1.4.6",
-    "@aws-cdk/cloud-assembly-api": "2.2.3",
-    "@aws-cdk/cloud-assembly-schema": ">=53.24.0",
+    "@aws-cdk/cdk-assets-lib": "1.4.7",
+    "@aws-cdk/cloud-assembly-api": "2.2.4",
+    "@aws-cdk/cloud-assembly-schema": ">=53.25.0",
     "@aws-cdk/cloudformation-diff": "2.187.1",
-    "@aws-cdk/toolkit-lib": "1.25.2",
+    "@aws-cdk/toolkit-lib": "1.26.0",
     "@aws-sdk/client-cloudformation": "^3",
-    "aws-cdk": "2.1122.0",
+    "aws-cdk": "2.1123.0",
     "chalk": "^4",
@@ -87,3 +87,3 @@ "chokidar": "^4",
     "@aws-cdk/aws-service-spec": "0.1.180",
-    "aws-cdk": "2.1122.0"
+    "aws-cdk": "2.1123.0"
   },
@@ -110,3 +110,3 @@ "keywords": [
   },
-  "version": "2.197.21",
+  "version": "2.197.22",
   "packageManager": "yarn@4.13.0",
@@ -113,0 +113,0 @@ "types": "lib/index.d.ts",

New alerts

Major refactor

Supply chain risk

Package has recently undergone a major refactor. It may be unstable or indicate significant internal changes. Use caution when updating to versions that include significant changes.

Found 1 instance in 1 package

Shell access

Supply chain risk

This module accesses the system shell. Accessing the system shell increases the risk of executing arbitrary code.

Found 1 instance in 1 package

Uses eval

Supply chain risk

Package uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Found 2 instances in 1 package

Dynamic require

Supply chain risk

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 11 instances in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 2 instances in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

URL strings

Supply chain risk

Package contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.

Found 1 instance in 1 package

Fixed alerts

Shell access

Supply chain risk

This module accesses the system shell. Accessing the system shell increases the risk of executing arbitrary code.

Found 1 instance in 1 package

Uses eval

Supply chain risk

Package uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Found 2 instances in 1 package

Dynamic require

Supply chain risk

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 11 instances in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 2 instances in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

URL strings

Supply chain risk

Package contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

21699886

15.88%

Worsened metrics

Number of medium supply chain risk alerts

7

16.67%

Dependency changes

• + Added

  aws-cdk@2.1123.0
  (transitive)

• - Removed

  aws-cdk@2.1122.0
  (transitive)

• Updated

  aws-cdk@2.1123.0