@diningphilosophers/esy - npm Package Compare versions

Comparing version 0.7.2-188-g573aacd to 0.7.2-188-g9a7b717

package.json

 {
+  "name": "@diningphilosophers/esy",
+  "version": "0.7.2-188-g9a7b717",
+  "license": "BSD-2-Clause",
   "description": "Package builder for esy.",
-  "license": "BSD-2-Clause",
-  "name": "@diningphilosophers/esy",
-  "version": "0.7.2-188-g573aacd",
   "scripts": {
-    "postinstall": "node -e \"process.env['OCAML_VERSION']='ocaml'; process.env['OCAML_PKG_NAME']='n.00.0000'; require('./esyInstallRelease.js')\""
+    "postinstall": "node -e \"process.env['OCAML_VERSION'] = process.platform == 'linux' ? '4.12.0-musl.static.flambda': '4.12.0'; process.env['OCAML_PKG_NAME'] = 'ocaml'; require('./postinstall.js')\""
   },
   "bin": {
-    "esy": "bin/esy.exe"
-  }
-}
+    "esy": "bin/esy"
+  },
+  "files": [
+    "_export/",
+    "bin/",
+    "postinstall.js",
+    "esyInstallRelease.js",
+    "platform-esy-npm-release-win32-x64"
+  ]
+}

README.md

@@ -0,0 +0,0 @@ # esy

New alerts

Install scripts

Supply chain risk

Install scripts are run when the package is installed. The majority of malware in npm is hidden in install scripts.

Found 1 instance in 1 package

Native code

Supply chain risk

Contains native code (e.g., compiled binaries or shared libraries). Including native code can obscure malicious behavior.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 1 instance in 1 package

Fixed alerts

Native code

Supply chain risk

Contains native code (e.g., compiled binaries or shared libraries). Including native code can obscure malicious behavior.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

55008409

increased by115.68%

Number of package files

15

increased by87.5%

Lines of code

23105

increased by101.53%

Worsened metrics

Number of high supply chain risk alerts

2

increased by100%

Number of low supply chain risk alerts

33

increased by120%

Number of medium supply chain risk alerts

17

increased by88.89%

No dependency changes