@browseth/cli - npm Package Compare versions

Comparing version 1.0.0 to 2.1.0

package.json

 {
   "name": "@browseth/cli",
-  "version": "1.0.0",
-  "license": "MIT",
-  "scripts": {
-    "build-browser": " ",
-    "build-node": " ",
-    "build": " ",
-    "start": " ",
-    "postinstall": "lerna link"
+  "version": "2.1.0",
+  "bin": {
+    "browseth-cli": "./bin/browseth-cli.js"
   },
-  "gitHead": "e6bf17fa9ec0257eda997937cb6c11f8671d1c63"
+  "dependencies": {
+    "commander": "^2.15.1",
+    "fs-extra": "^6.0.1"
+  },
+  "gitHead": "c2dc7481785508b6690840f984aadd9b6de9271b"
 }

New alerts

Major refactor

Supply chain risk

Package has recently undergone a major refactor. It may be unstable or indicate significant internal changes. Use caution when updating to versions that include significant changes.

Found 1 instance in 1 package

Network access

Supply chain risk

This module accesses the network.

Found 1 instance in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 2 instances in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

Fixed alerts

Install scripts

Supply chain risk

Install scripts are run when the package is installed. The majority of malware in npm is hidden in install scripts.

Found 1 instance in 1 package

Empty package

Supply chain risk

Package does not contain any code. It may be removed, is name squatting, or the result of a faulty package publish.

Found 1 instance in 1 package

Major refactor

Supply chain risk

Package has recently undergone a major refactor. It may be unstable or indicate significant internal changes. Use caution when updating to versions that include significant changes.

Found 1 instance in 1 package

New author

Supply chain risk

A new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.

Found 1 instance in 1 package

No README

Quality

Package does not have a README. This may indicate a failed publish or a low quality package.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

2685445

198969.31%

Number of package files

154

7600%

Lines of code

42574

Infinity%

Number of medium quality alerts

1

-50%

Number of lines in readme file

2445

Infinity%

Number of high supply chain risk alerts

0

-100%

Worsened metrics

Dependency count

2

Infinity%

Number of low supply chain risk alerts

4

300%

Number of medium supply chain risk alerts

6

100%

Dependency changes

• + Added

  commander@^2.15.1

• + Added

  fs-extra@^6.0.1

• + Added

  commander@2.20.3
  (transitive)

• + Added

  fs-extra@6.0.1
  (transitive)

• + Added

  graceful-fs@4.2.11
  (transitive)

• + Added

  jsonfile@4.0.0
  (transitive)

• + Added

  universalify@0.1.2
  (transitive)