@datadog/pprof - npm Package Compare versions

Comparing version 0.1.0 to 0.1.1

package.json

 {
   "name": "@datadog/pprof",
-  "version": "0.1.0",
+  "version": "0.1.1",
   "description": "pprof support for Node.js",
@@ -86,3 +86,5 @@ "repository": "datadog/pprof-nodejs",
     "package.json",
-    "README.md"
+    "README.md",
+    "scripts",
+    "prebuilds"
   ],
@@ -89,0 +91,0 @@ "nyc": {

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Native code

Supply chain risk

Contains native code (e.g., compiled binaries or shared libraries). Including native code can obscure malicious behavior.

Found 27 instances in 1 package

Network access

Supply chain risk

This module accesses the network.

Found 1 instance in 1 package

Shell access

Supply chain risk

This module accesses the system shell. Accessing the system shell increases the risk of executing arbitrary code.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 3 instances in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

6299401

increased by1928.32%

Number of package files

71

increased by86.84%

Lines of code

5286

increased by7.11%

Worsened metrics

Number of low supply chain risk alerts

12

increased by200%

Number of medium supply chain risk alerts

36

increased by1700%

No dependency changes