@cleocode/worktree
Advanced tools
@cleocode/worktree - npm Package Compare versions
New alerts
Environment variable access
Supply chain riskPackage accesses environment variables, which may be a sign of credential stuffing or data theft.
Filesystem access
Supply chain riskAccesses the file system, and could potentially read sensitive data.
Fixed alerts
Environment variable access
Supply chain riskPackage accesses environment variables, which may be a sign of credential stuffing or data theft.
Filesystem access
Supply chain riskAccesses the file system, and could potentially read sensitive data.
Improved metrics
- Total package byte prevSize
11334128
0.6%- Number of package files
79
5.33%- Lines of code
5424
23.86%Worsened metrics
- Number of low supply chain risk alerts
24
14.29%- Number of medium supply chain risk alerts
11
10%Dependency changes
+ Added
@cleocode/contracts@2026.9.21(transitive)+ Added
@cleocode/lafs@2026.9.21(transitive)+ Added
@cleocode/paths@2026.9.21(transitive)- Removed
@cleocode/contracts@2026.9.20(transitive)- Removed
@cleocode/lafs@2026.9.20(transitive)- Removed
@cleocode/paths@2026.9.20(transitive)Updated
@cleocode/paths@2026.9.21