@eclipse-che/workspace-telemetry-client - npm Package Compare versions

Comparing version 0.0.1-1635871876 to 0.0.1-1635878405

package.json

 {
   "name": "@eclipse-che/workspace-telemetry-client",
-  "version": "0.0.1-1635871876",
+  "version": "0.0.1-1635878405",
   "description": "",
@@ -24,3 +24,3 @@ "main": "dist/server.js",
     "axios": "0.21.2",
-    "moxios": "git://github.com/stoplightio/moxios#v1.3.0"
+    "moxios": "github:stoplightio/moxios#v1.3.0"
   },
@@ -27,0 +27,0 @@ "devDependencies": {

New alerts

GitHub dependency

Supply chain risk

Contains a dependency which resolves to a GitHub URL. Dependencies fetched from GitHub specifiers are not immutable can be used to inject untrusted code or reduce the likelihood of a reproducible install.

Found 1 instance in 1 package

Fixed alerts

Git dependency

Supply chain risk

Contains a dependency which resolves to a remote git URL. Dependencies fetched from git URLs are not immutable and can be used to inject untrusted code or reduce the likelihood of a reproducible install.

Found 1 instance in 1 package

Worsened metrics

Total package byte prevSize

464345

Dependency changes

• Updatedmoxios@github:stoplightio/moxios#v1.3.0