@dglsparsons/postinstall-test - npm Package Compare versions

Comparing version 0.0.1 to 0.0.2

package.json

 {
   "name": "@dglsparsons/postinstall-test",
   "author": "",
-  "version": "0.0.1",
+  "version": "0.0.2",
   "description": "",
@@ -9,6 +9,11 @@ "main": "index.js",
   "license": "ISC",
+  "dependencies": {
+    "@types/node": "^20.3.1",
+    "semver": "^7.5.3",
+    "typescript": "^5.1.3"
+  },
   "scripts": {
     "test": "echo \"Error: no test specified\" && exit 1",
-    "postinstall": "echo \"FOOBAR\""
+    "postinstall": "node postinstall.js"
   }
 }

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Install scripts

Supply chain risk

Install scripts are run when the package is installed. The majority of malware in npm is hidden in install scripts.

Found 1 instance in 1 package

Shell access

Supply chain risk

This module accesses the system shell. Accessing the system shell increases the risk of executing arbitrary code.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Install scripts

Supply chain risk

Install scripts are run when the package is installed. The majority of malware in npm is hidden in install scripts.

Found 1 instance in 1 package

Empty package

Supply chain risk

Package does not contain any code. It may be removed, is name squatting, or the result of a faulty package publish.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

1418

increased by406.43%

Number of package files

4

increased by300%

Lines of code

29

increased byInfinity%

Worsened metrics

Dependency count

3

increased byInfinity%

Dependency changes

• + Added@types/node@^20.3.1

• + Addedsemver@^7.5.3

• + Addedtypescript@^5.1.3

• + Added@types/node@20.17.10(transitive)

• + Addedsemver@7.6.3(transitive)

• + Addedtypescript@5.7.2(transitive)

• + Addedundici-types@6.19.8(transitive)