@datadog/native-metrics - npm Package Compare versions

Comparing version 1.2.0 to 1.3.0

package.json

 {
   "name": "@datadog/native-metrics",
-  "version": "1.2.0",
+  "version": "1.3.0",
   "description": "Native metrics collector for libuv and v8",
@@ -13,4 +13,2 @@ "main": "index.js",
     "rebuild": "node-gyp rebuild",
-    "prebuild": "node scripts/prebuild.js",
-    "prepublishOnly": "node scripts/prepublish.js",
     "lint": "node scripts/check_licenses.js && eslint .",
@@ -32,6 +30,3 @@ "test": "mocha 'test/**/*.spec.js'"
   "devDependencies": {
-    "adm-zip": "^0.5.9",
-    "axios": "^0.21.1",
     "chai": "^4.3.4",
-    "checksum": "^0.1.1",
     "eslint": "^7.31.0",
@@ -43,9 +38,4 @@ "eslint-config-standard": "^16.0.3",
     "eslint-plugin-standard": "^5.0.0",
-    "glob": "^7.1.7",
-    "mkdirp": "^1.0.4",
-    "mocha": "^9.0.3",
-    "rimraf": "^3.0.2",
-    "semver": "^7.3.5",
-    "tar": "^6.1.2"
+    "mocha": "^9.0.3"
   }
 }

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Native code

Supply chain risk

Contains native code (e.g., compiled binaries or shared libraries). Including native code can obscure malicious behavior.

Found 7 instances in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Network access

Supply chain risk

This module accesses the network.

Found 1 instance in 1 package

Shell access

Supply chain risk

This module accesses the system shell. Accessing the system shell increases the risk of executing arbitrary code.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 2 instances in 1 package

Improved metrics

Total package byte prevSize

6814067

increased by40.5%

Dev dependency count

8

decreased by-50%

Number of low supply chain risk alerts

3

decreased by-62.5%

Worsened metrics

Number of package files

71

decreased by-36.61%

Lines of code

62

decreased by-73.95%

Number of medium supply chain risk alerts

51

increased by2%

No dependency changes