@codefresh-io/kube-integration - npm Package Compare versions

Comparing version 1.24.6 to 1.24.7

package.json

 {
-  "version": "1.24.6",
+  "version": "1.24.7",
   "name": "@codefresh-io/kube-integration",
@@ -47,3 +47,3 @@ "main": "index.js",
     "cf-logs": "^1.1.24",
-    "cf-monitor": "git+https://github.com/codefresh-io/cf-monitor.git#072ce2b419bb615a9567d253139431ca3c3adf17",
+    "cf-monitor": "git+https://github.com/codefresh-io/cf-monitor.git#00af78d3d7c7bffc41f27f75279a66a30f0ab987",
     "compression": "^1.6.2",
@@ -50,0 +50,0 @@ "cookie-parser": "^1.4.3",

New alerts

Git dependency

Supply chain risk

Contains a dependency which resolves to a remote git URL. Dependencies fetched from git URLs are not immutable can be used to inject untrusted code or reduce the likelihood of a reproducible install.

Found 1 instance in 1 package

Fixed alerts

Git dependency

Supply chain risk

Contains a dependency which resolves to a remote git URL. Dependencies fetched from git URLs are not immutable can be used to inject untrusted code or reduce the likelihood of a reproducible install.

Found 1 instance in 1 package

Worsened metrics

Total package byte prevSize

629385

Dependency changes

• Updatedcf-monitor@git+https://github.com/codefresh-io/cf-monitor.git#00af78d3d7c7bffc41f27f75279a66a30f0ab987