New Research: Supply Chain Attack on Axios Pulls Malicious Dependency from npm.Details → →
@dotcms/angular
Advanced tools
@dotcms/angular - npm Package Compare versions
Package version was removed
This package version has been unpublished, mostly likely due to security reasons
+2
-2
| { | ||
| "name": "@dotcms/angular", | ||
| "version": "1.0.3", | ||
| "version": "2.0.0-next.1", | ||
| "peerDependencies": { | ||
@@ -48,2 +48,2 @@ "rxjs": ">=7.0.0", | ||
| "sideEffects": false | ||
| } | ||
| } |
New alerts
Unpublished package
Supply chain riskPackage version was not found on the registry. It may exist on a different registry and need to be configured to pull from that registry.
Found 1 instance in 1 package
Long strings
Supply chain riskContains long string literals, which may be a sign of obfuscated or packed code.
Found 1 instance in 1 package
No v1
QualityPackage is not semver >=1. This means it is not stable and does not support ^ ranges.
Found 1 instance in 1 package
Fixed alerts
Unpopular package
QualityThis package is not very popular.
Found 1 instance in 1 package
Long strings
Supply chain riskContains long string literals, which may be a sign of obfuscated or packed code.
Found 1 instance in 1 package
Improved metrics
- Total package byte prevSize
281092
0- Number of medium quality alerts
0
-100%Worsened metrics
- Number of low quality alerts
1
Infinity%- Number of medium supply chain risk alerts
1
Infinity%No dependency changes