New:Introducing Socket Scanning for VS Code Marketplace Extensions.Learn more →
@blockrun/franklin
Advanced tools
@blockrun/franklin - npm Package Compare versions
New alerts
HTTP dependency
Supply chain riskContains a dependency which resolves to a remote HTTP URL which could be used to inject untrusted code and reduce overall package reliability.
AI-detected potential code anomaly
Supply chain riskAI has identified unusual behaviors that may pose a security risk.
Found 5 instances
Fixed alerts
HTTP dependency
Supply chain riskContains a dependency which resolves to a remote HTTP URL which could be used to inject untrusted code and reduce overall package reliability.
AI-detected potential code anomaly
Supply chain riskAI has identified unusual behaviors that may pose a security risk.
Found 3 instances
Worsened metrics
- Number of low supply chain risk alerts
249
0.81%