New:Introducing Socket Scanning for VS Code Marketplace Extensions.Learn more →
@dotenvx/dotenvx
Advanced tools
@dotenvx/dotenvx - npm Package Compare versions
New alerts
Environment variable access
Supply chain riskPackage accesses environment variables, which may be a sign of credential stuffing or data theft.
AI-detected potential code anomaly
Supply chain riskAI has identified unusual behaviors that may pose a security risk.
Found 6 instances
Long strings
Supply chain riskContains long string literals, which may be a sign of obfuscated or packed code.
URL strings
Supply chain riskPackage contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.
Fixed alerts
AI-detected potential code anomaly
Supply chain riskAI has identified unusual behaviors that may pose a security risk.
Found 6 instances
URL strings
Supply chain riskPackage contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.
Improved metrics
- Total package byte prevSize
705538
3.98%- Number of package files
242
5.22%- Lines of code
14011
3.89%- Number of lines in readme file
3961
0.89%Worsened metrics
- Number of low supply chain risk alerts
98
12.64%- Number of medium supply chain risk alerts
27
17.39%No dependency changes