@cafitac/hermit-agent
Advanced tools
@cafitac/hermit-agent - npm Package Compare versions
New alerts
Major refactor
Supply chain riskPackage has recently undergone a major refactor. It may be unstable or indicate significant internal changes. Use caution when updating to versions that include significant changes.
Filesystem access
Supply chain riskAccesses the file system, and could potentially read sensitive data.
Fixed alerts
No README
QualityPackage does not have a README. This may indicate a failed publish or a low quality package.
Shell access
Supply chain riskThis module accesses the system shell. Accessing the system shell increases the risk of executing arbitrary code.
Environment variable access
Supply chain riskPackage accesses environment variables, which may be a sign of credential stuffing or data theft.
Found 32 instances
Filesystem access
Supply chain riskAccesses the file system, and could potentially read sensitive data.
Found 2 instances
AI-detected potential code anomaly
Supply chain riskAI has identified unusual behaviors that may pose a security risk.
Found 2 instances
Long strings
Supply chain riskContains long string literals, which may be a sign of obfuscated or packed code.
Minified code
QualityThis package contains minified code. This may be harmless in some cases where minified code is included in packaged libraries, however packages on npm should not minify code.
No bug tracker
MaintenancePackage does not have a linked bug tracker in package.json.
No License Found
LicenseLicense information could not be found.
No tests
QualityPackage does not have any tests. This is a strong signal of a poorly maintained or low quality package.
No website
QualityPackage does not have a website.
URL strings
Supply chain riskPackage contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.
Improved metrics
- Dependency count
0
-100%- Dev dependency count
0
-100%- Number of low license alerts
0
-100%- Number of low maintenance alerts
1
-50%- Number of low quality alerts
1
-75%- Number of medium quality alerts
1
-50%- Number of lines in readme file
176
Infinity%- Number of low supply chain risk alerts
2
-97.7%- Number of medium supply chain risk alerts
2
-33.33%Worsened metrics
- Total package byte prevSize
9062
-98.92%- Number of package files
4
-97.01%- Lines of code
48
-99.76%Dependency changes
- Removed
@alcalzone/ansi-tokenize@^0.3.0- Removed
auto-bind@^5.0.1- Removed
bidi-js@^1.0.3- Removed
chalk@^5.3.0- Removed
cli-boxes@^4.0.1- Removed
cli-highlight@^2.1.11- Removed
code-excerpt@^4.0.0- Removed
emoji-regex@^10.4.0- Removed
get-east-asian-width@^1.3.0- Removed
indent-string@^5.0.0- Removed
lodash-es@^4.17.21- Removed
marked@^18.0.0- Removed
react@^19.2.4- Removed
react-reconciler@0.33.0- Removed
semver@^7.6.3- Removed
signal-exit@^4.1.0- Removed
slice-ansi@^7.1.0- Removed
stack-utils@^2.0.6- Removed
strip-ansi@^7.1.0- Removed
supports-hyperlinks@^3.1.0- Removed
usehooks-ts@^3.1.0- Removed
wrap-ansi@^9.0.0- Removed
@alcalzone/ansi-tokenize@0.3.0(transitive)- Removed
ansi-regex@5.0.16.3.0(transitive)- Removed
ansi-styles@4.3.06.2.3(transitive)- Removed
any-promise@1.3.0(transitive)- Removed
auto-bind@5.0.1(transitive)- Removed
bidi-js@1.1.0(transitive)- Removed
chalk@4.1.25.6.2(transitive)- Removed
cli-boxes@4.0.1(transitive)- Removed
cli-highlight@2.1.11(transitive)- Removed
cliui@7.0.4(transitive)- Removed
code-excerpt@4.0.0(transitive)- Removed
color-convert@2.0.1(transitive)- Removed
color-name@1.1.4(transitive)- Removed
convert-to-spaces@2.0.1(transitive)- Removed
emoji-regex@10.6.08.0.0(transitive)- Removed
escalade@3.2.0(transitive)- Removed
escape-string-regexp@2.0.0(transitive)- Removed
get-caller-file@2.0.5(transitive)- Removed
get-east-asian-width@1.6.0(transitive)- Removed
has-flag@4.0.0(transitive)- Removed
highlight.js@10.7.3(transitive)- Removed
indent-string@5.0.0(transitive)- Removed
is-fullwidth-code-point@3.0.05.1.0(transitive)- Removed
lodash-es@4.18.1(transitive)- Removed
lodash.debounce@4.0.8(transitive)- Removed
marked@18.0.12(transitive)- Removed
mz@2.7.0(transitive)- Removed
object-assign@4.1.1(transitive)- Removed
parse5@5.1.16.0.1(transitive)- Removed
parse5-htmlparser2-tree-adapter@6.0.1(transitive)- Removed
react@19.3.0(transitive)- Removed
react-reconciler@0.33.0(transitive)- Removed
require-directory@2.1.1(transitive)- Removed
require-from-string@2.0.2(transitive)- Removed
scheduler@0.27.0(transitive)- Removed
semver@7.8.5(transitive)- Removed
signal-exit@4.1.0(transitive)- Removed
slice-ansi@7.1.2(transitive)- Removed
stack-utils@2.0.6(transitive)- Removed
string-width@4.2.37.2.0(transitive)- Removed
strip-ansi@6.0.17.2.0(transitive)- Removed
supports-color@7.2.0(transitive)- Removed
supports-hyperlinks@3.2.0(transitive)- Removed
thenify@3.3.1(transitive)- Removed
thenify-all@1.6.0(transitive)- Removed
usehooks-ts@3.1.1(transitive)- Removed
wrap-ansi@7.0.09.0.2(transitive)- Removed
y18n@5.0.8(transitive)- Removed
yargs@16.2.2(transitive)- Removed
yargs-parser@20.2.9(transitive)