New:Introducing Socket Scanning for VS Code Marketplace Extensions.Learn more →
@azure/identity
Advanced tools
@azure/identity - npm Package Compare versions
New alerts
Environment variable access
Supply chain riskPackage accesses environment variables, which may be a sign of credential stuffing or data theft.
Found 2 instances
No v1
QualityPackage is not semver >=1. This means it is not stable and does not support ^ ranges.
URL strings
Supply chain riskPackage contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.
Fixed alerts
URL strings
Supply chain riskPackage contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.
Improved metrics
- Total package byte prevSize
3338006
2.91%- Number of package files
1204
2.73%- Lines of code
31111
2.62%- Number of lines in readme file
362
5.54%Worsened metrics
- Number of low quality alerts
1
Infinity%- Number of low supply chain risk alerts
165
7.84%No dependency changes